Policy: AWSRoboMakerServiceRolePolicy ARN: arn:aws:iam::aws:policy/AWSRoboMakerServiceRolePolicy Allowed Actions Actions Services ec2:CreateNetworkInterfacePermission ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 greengrass:CreateDeployment greengrass greengrass:CreateFunctionDefinition greengrass greengrass:CreateFunctionDefinitionVersion greengrass greengrass:CreateGroupVersion greengrass greengrass:GetAssociatedRole greengrass greengrass:GetCoreDefinitionVersion greengrass greengrass:GetDeploymentStatus greengrass greengrass:GetFunctionDefinitionVersion greengrass greengrass:GetGroup greengrass greengrass:GetGroupVersion greengrass iam:PassRole iam lambda:CreateFunction lambda lambda:GetFunction lambda lambda:UpdateFunctionCode lambda lambda:UpdateFunctionConfiguration lambda