Policy: AwsGlueSessionUserRestrictedNotebookServiceRole ARN: arn:aws:iam::aws:policy/service-role/AwsGlueSessionUserRestrictedNotebookServiceRole Allowed Actions Actions Services ec2:CreateTags ec2 ec2:DeleteTags ec2 glue:* glue glue:CancelStatement glue glue:CreateSession glue glue:DeleteSession glue glue:GetSession glue glue:GetStatement glue glue:ListSessions glue glue:ListStatements glue glue:RunStatement glue glue:StopSession glue glue:TagResource glue glue:UntagResource glue logs:CreateLogGroup logs logs:CreateLogStream logs logs:PutLogEvents logs s3:CreateBucket s3 s3:DeleteObject s3 s3:GetObject s3 s3:GetObject s3 s3:PutObject s3 tag:TagResources tag tag:UntagResources tag