Policy: AWSElasticBeanstalkCustomPlatformforEC2Role ARN: arn:aws:iam::aws:policy/AWSElasticBeanstalkCustomPlatformforEC2Role Allowed Actions Actions Services ec2:AttachVolume ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CopyImage ec2 ec2:CreateImage ec2 ec2:CreateKeypair ec2 ec2:CreateSecurityGroup ec2 ec2:CreateSnapshot ec2 ec2:CreateTags ec2 ec2:CreateVolume ec2 ec2:DeleteKeypair ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteSnapshot ec2 ec2:DeleteVolume ec2 ec2:DeregisterImage ec2 ec2:DescribeImageAttribute ec2 ec2:DescribeImages ec2 ec2:DescribeInstances ec2 ec2:DescribeRegions ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSnapshots ec2 ec2:DescribeSubnets ec2 ec2:DescribeTags ec2 ec2:DescribeVolumes ec2 ec2:DetachVolume ec2 ec2:GetPasswordData ec2 ec2:ModifyImageAttribute ec2 ec2:ModifyInstanceAttribute ec2 ec2:ModifySnapshotAttribute ec2 ec2:RegisterImage ec2 ec2:RunInstances ec2 ec2:StopInstances ec2 ec2:TerminateInstances ec2 logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogStreams logs logs:PutLogEvents logs s3:Get* s3 s3:List* s3 s3:PutObject s3