Policy: AWSMigrationHubOrchestratorServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSMigrationHubOrchestratorServiceRolePolicy Allowed Actions Actions Services discovery:DescribeConfigurations discovery discovery:ListConfigurations discovery ec2:CreateLaunchTemplateVersion ec2 ec2:DescribeImportImageTasks ec2 ec2:DescribeInstances ec2 ec2:DescribeLaunchTemplates ec2 ec2:ModifyLaunchTemplate ec2 events:DeleteRule events events:DescribeRule events events:PutRule events events:PutTargets events events:RemoveTargets events launchwizard:DescribeProvisionedApp launchwizard launchwizard:GetDeployment launchwizard launchwizard:ListDeployments launchwizard launchwizard:ListProvisionedApps launchwizard mgh:GetHomeRegion mgh mgn:ChangeServerLifeCycleState mgn mgn:DescribeSourceServers mgn mgn:FinalizeCutover mgn mgn:GetLaunchConfiguration mgn mgn:GetReplicationConfiguration mgn mgn:MarkAsArchived mgn mgn:StartCutover mgn mgn:StartTest mgn mgn:UpdateReplicationConfiguration mgn s3:GetObject s3 s3:ListBucket s3 ssm:CancelCommand ssm ssm:DescribeInstanceInformation ssm ssm:GetCommandInvocation ssm ssm:GetCommandInvocation ssm ssm:SendCommand ssm