Policy: AWSDeepRacerRoboMakerAccessPolicy ARN: arn:aws:iam::aws:policy/AWSDeepRacerRoboMakerAccessPolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:CreateNetworkInterfacePermission ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 kinesisvideo:CreateStream kinesisvideo kinesisvideo:DescribeStream kinesisvideo kinesisvideo:GetDataEndpoint kinesisvideo kinesisvideo:PutMedia kinesisvideo kinesisvideo:TagStream kinesisvideo logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogStreams logs logs:PutLogEvents logs robomaker:* robomaker s3:GetBucketLocation s3 s3:GetObject s3 s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:PutObject s3