Policy: AWSLambdaMSKExecutionRole ARN: arn:aws:iam::aws:policy/service-role/AWSLambdaMSKExecutionRole Allowed Actions Actions Services ec2:CreateNetworkInterface ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 kafka:DescribeCluster kafka kafka:DescribeClusterV2 kafka kafka:GetBootstrapBrokers kafka logs:CreateLogGroup logs logs:CreateLogStream logs logs:PutLogEvents logs