Policy: AWSImageBuilderFullAccess ARN: arn:aws:iam::aws:policy/AWSImageBuilderFullAccess Allowed Actions Actions Services ec2:DescribeImages ec2 ec2:DescribeInstanceTypeOfferings ec2 ec2:DescribeKeyPairs ec2 ec2:DescribeLaunchTemplates ec2 ec2:DescribeRegions ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSnapshots ec2 ec2:DescribeSubnets ec2 ec2:DescribeVolumes ec2 ec2:DescribeVpcs ec2 iam:CreateServiceLinkedRole iam iam:GetInstanceProfile iam iam:GetRole iam iam:ListInstanceProfiles iam iam:ListRoles iam iam:PassRole iam imagebuilder:* imagebuilder license-manager:ListLicenseConfigurations license-manager license-manager:ListLicenseSpecificationsForResource license-manager s3:GetBucketLocation s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 sns:ListTopics sns sns:Publish sns