Policy: AWSIPAMServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSIPAMServiceRolePolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:DescribeAccountAttributes ec2 ec2:DescribeAddresses ec2 ec2:DescribeByoipCidrs ec2 ec2:DescribeIpv6Pools ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribePublicIpv4Pools ec2 ec2:DescribeSecurityGroupRules ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:DescribeVpnConnections ec2 ec2:GetIpamDiscoveredAccounts ec2 ec2:GetIpamDiscoveredPublicAddresses ec2 ec2:GetIpamDiscoveredResourceCidrs ec2 globalaccelerator:ListAccelerators globalaccelerator globalaccelerator:ListByoipCidrs globalaccelerator organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:DescribeOrganizationalUnit organizations organizations:ListAccounts organizations organizations:ListChildren organizations organizations:ListDelegatedAdministrators organizations organizations:ListParents organizations