Policy: AWSDeepRacerCloudFormationAccessPolicy ARN: arn:aws:iam::aws:policy/AWSDeepRacerCloudFormationAccessPolicy Allowed Actions Actions Services cloudformation:* cloudformation ec2:AllocateAddress ec2 ec2:AssociateRouteTable ec2 ec2:AttachInternetGateway ec2 ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateInternetGateway ec2 ec2:CreateNatGateway ec2 ec2:CreateNetworkAcl ec2 ec2:CreateNetworkAclEntry ec2 ec2:CreateRoute ec2 ec2:CreateRouteTable ec2 ec2:CreateSecurityGroup ec2 ec2:CreateSubnet ec2 ec2:CreateTags ec2 ec2:CreateVpc ec2 ec2:CreateVpcEndpoint ec2 ec2:DeleteInternetGateway ec2 ec2:DeleteNatGateway ec2 ec2:DeleteNetworkAcl ec2 ec2:DeleteNetworkAclEntry ec2 ec2:DeleteRoute ec2 ec2:DeleteRouteTable ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteSubnet ec2 ec2:DeleteTags ec2 ec2:DeleteVpc ec2 ec2:DeleteVpcEndpoints ec2 ec2:DescribeAddresses ec2 ec2:DescribeInternetGateways ec2 ec2:DescribeNatGateways ec2 ec2:DescribeNetworkAcls ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeTags ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcs ec2 ec2:DetachInternetGateway ec2 ec2:DisassociateRouteTable ec2 ec2:ModifySubnetAttribute ec2 ec2:ModifyVpcAttribute ec2 ec2:ReleaseAddress ec2 ec2:ReplaceNetworkAclAssociation ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RevokeSecurityGroupIngress ec2 iam:PassRole iam lambda:CreateFunction lambda lambda:DeleteFunction lambda lambda:GetFunction lambda lambda:TagResource lambda lambda:UpdateFunctionCode lambda robomaker:CreateSimulationApplication robomaker robomaker:CreateSimulationApplicationVersion robomaker robomaker:DeleteSimulationApplication robomaker robomaker:DescribeSimulationApplication robomaker robomaker:ListSimulationApplications robomaker robomaker:TagResource robomaker robomaker:UpdateSimulationApplication robomaker s3:CreateBucket s3 s3:DeleteBucket s3 s3:GetBucketAcl s3 s3:ListBucket s3 s3:PutBucketPolicy s3