Policy: AWSDeepRacerServiceRolePolicy ARN: arn:aws:iam::aws:policy/service-role/AWSDeepRacerServiceRolePolicy Allowed Actions Actions Services cloudformation:CreateStack cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeStackDriftDetectionStatus cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStackResource cloudformation cloudformation:DescribeStackResourceDrifts cloudformation cloudformation:DescribeStackResources cloudformation cloudformation:DescribeStacks cloudformation cloudformation:DetectStackDrift cloudformation cloudformation:ListStackResources cloudformation cloudwatch:GetMetricData cloudwatch deepracer:* deepracer iam:CreateServiceLinkedRole iam iam:PassRole iam kinesisvideo:CreateStream kinesisvideo kinesisvideo:DeleteStream kinesisvideo kinesisvideo:DescribeStream kinesisvideo kinesisvideo:GetDataEndpoint kinesisvideo kinesisvideo:GetHLSStreamingSessionURL kinesisvideo kinesisvideo:GetMedia kinesisvideo kinesisvideo:PutMedia kinesisvideo kinesisvideo:TagStream kinesisvideo lambda:CreateFunction lambda lambda:DeleteFunction lambda lambda:GetFunction lambda lambda:InvokeFunction lambda lambda:UpdateFunctionCode lambda logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogStreams logs logs:GetLogEvents logs logs:PutLogEvents logs robomaker:* robomaker s3:DeleteObject s3 s3:GetBucketAcl s3 s3:GetBucketLocation s3 s3:GetObject s3 s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:PutBucketPolicy s3 s3:PutObject s3 sagemaker:* sagemaker