Policy: AWSOpsWorks_FullAccess ARN: arn:aws:iam::aws:policy/AWSOpsWorks_FullAccess Allowed Actions Actions Services cloudwatch:GetMetricStatistics cloudwatch ec2:DescribeAccountAttributes ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeInstances ec2 ec2:DescribeKeyPairs ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 elasticloadbalancing:DescribeInstanceHealth elasticloadbalancing elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing iam:GetRolePolicy iam iam:ListInstanceProfiles iam iam:ListRoles iam iam:ListUsers iam iam:PassRole iam opsworks:* opsworks