Policy: AWSGlueConsoleFullAccess ARN: arn:aws:iam::aws:policy/AWSGlueConsoleFullAccess Allowed Actions Actions Services cloudformation:CreateStack cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeStacks cloudformation cloudformation:GetTemplateSummary cloudformation cloudformation:ListStacks cloudformation cloudwatch:GetMetricData cloudwatch cloudwatch:ListDashboards cloudwatch databrew:DescribeRecipe databrew databrew:ListRecipeVersions databrew databrew:ListRecipes databrew dynamodb:ListTables dynamodb ec2:CreateTags ec2 ec2:DeleteTags ec2 ec2:DescribeImages ec2 ec2:DescribeInstances ec2 ec2:DescribeKeyPairs ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcs ec2 ec2:RunInstances ec2 ec2:TerminateInstances ec2 glue:* glue iam:GetRole iam iam:GetRolePolicy iam iam:ListAttachedRolePolicies iam iam:ListGroups iam iam:ListRolePolicies iam iam:ListRoles iam iam:ListUsers iam iam:PassRole iam iam:PassRole iam iam:PassRole iam kms:DescribeKey kms kms:ListAliases kms logs:GetLogEvents logs rds:DescribeDBClusters rds rds:DescribeDBInstances rds rds:DescribeDBSubnetGroups rds redshift:DescribeClusterSubnetGroups redshift redshift:DescribeClusters redshift s3:CreateBucket s3 s3:GetBucketAcl s3 s3:GetBucketLocation s3 s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:PutObject s3 tag:GetResources tag