Policy: AWSGlueServiceRole ARN: arn:aws:iam::aws:policy/service-role/AWSGlueServiceRole Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:CreateNetworkInterface ec2 ec2:CreateTags ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteTags ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcEndpoints ec2 glue:* glue iam:GetRole iam iam:GetRolePolicy iam iam:ListRolePolicies iam logs:CreateLogGroup logs logs:CreateLogStream logs logs:PutLogEvents logs s3:CreateBucket s3 s3:DeleteObject s3 s3:GetBucketAcl s3 s3:GetBucketLocation s3 s3:GetObject s3 s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:PutObject s3