Policy: AWSRoboMakerServicePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSRoboMakerServicePolicy Allowed Actions Actions Services ec2:CreateNetworkInterfacePermission ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 greengrass:CreateDeployment greengrass greengrass:CreateFunctionDefinition greengrass greengrass:CreateFunctionDefinitionVersion greengrass greengrass:CreateGroupVersion greengrass greengrass:GetAssociatedRole greengrass greengrass:GetCoreDefinitionVersion greengrass greengrass:GetDeploymentStatus greengrass greengrass:GetFunctionDefinitionVersion greengrass greengrass:GetGroup greengrass greengrass:GetGroupVersion greengrass iam:PassRole iam lambda:CreateAlias lambda lambda:CreateFunction lambda lambda:DeleteAlias lambda lambda:DeleteFunction lambda lambda:GetAlias lambda lambda:GetFunction lambda lambda:ListVersionsByFunction lambda lambda:UpdateAlias lambda lambda:UpdateFunctionCode lambda lambda:UpdateFunctionConfiguration lambda robomaker:CancelSimulationJob robomaker robomaker:CreateSimulationJob robomaker robomaker:TagResource robomaker