Policy: AWSMarketplaceFullAccess ARN: arn:aws:iam::aws:policy/AWSMarketplaceFullAccess Allowed Actions Actions Services aws-marketplace:* aws-marketplace cloudformation:CreateStack cloudformation cloudformation:DescribeStackResource cloudformation cloudformation:DescribeStackResources cloudformation cloudformation:DescribeStacks cloudformation cloudformation:List* cloudformation ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CopyImage ec2 ec2:CreateImage ec2 ec2:CreateSecurityGroup ec2 ec2:CreateTags ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteSnapshot ec2 ec2:DeregisterImage ec2 ec2:DescribeAccountAttributes ec2 ec2:DescribeAccountAttributes ec2 ec2:DescribeAddresses ec2 ec2:DescribeImages ec2 ec2:DescribeInstanceStatus ec2 ec2:DescribeInstances ec2 ec2:DescribeKeyPairs ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSnapshots ec2 ec2:DescribeSubnets ec2 ec2:DescribeTags ec2 ec2:DescribeVpcs ec2 ec2:RunInstances ec2 ec2:StartInstances ec2 ec2:StopInstances ec2 ec2:TerminateInstances ec2 iam:GetInstanceProfile iam iam:GetRole iam iam:ListInstanceProfiles iam iam:ListRoles iam iam:PassRole iam iam:PassRole iam s3:GetObject s3 s3:ListBucket s3 sns:CreateTopic sns sns:GetTopicAttributes sns sns:ListTopics sns sns:Publish sns sns:setTopicAttributes sns ssm:DescribeDocument ssm ssm:GetAutomationExecution ssm ssm:ListDocuments ssm ssm:StartAutomationExecution ssm