Policy: AWSLambdaVPCAccessExecutionRole ARN: arn:aws:iam::aws:policy/service-role/AWSLambdaVPCAccessExecutionRole Allowed Actions Actions Services ec2:AssignPrivateIpAddresses ec2 ec2:CreateNetworkInterface ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSubnets ec2 ec2:UnassignPrivateIpAddresses ec2 logs:CreateLogGroup logs logs:CreateLogStream logs logs:PutLogEvents logs