Policy: AWSServiceRoleForAmazonEKSNodegroup ARN: arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForAmazonEKSNodegroup Allowed Actions Actions Services autoscaling:CompleteLifecycleAction autoscaling autoscaling:CreateAutoScalingGroup autoscaling autoscaling:CreateOrUpdateTags autoscaling autoscaling:DeleteAutoScalingGroup autoscaling autoscaling:DescribeAutoScalingGroups autoscaling autoscaling:EnableMetricsCollection autoscaling autoscaling:PutLifecycleHook autoscaling autoscaling:PutNotificationConfiguration autoscaling autoscaling:PutScheduledUpdateGroupAction autoscaling autoscaling:ResumeProcesses autoscaling autoscaling:SuspendProcesses autoscaling autoscaling:TerminateInstanceInAutoScalingGroup autoscaling autoscaling:UpdateAutoScalingGroup autoscaling ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateLaunchTemplate ec2 ec2:CreateLaunchTemplateVersion ec2 ec2:CreateSecurityGroup ec2 ec2:CreateTags ec2 ec2:CreateTags ec2 ec2:DeleteLaunchTemplate ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteTags ec2 ec2:DescribeCapacityReservations ec2 ec2:DescribeInstances ec2 ec2:DescribeInstances ec2 ec2:DescribeInstances ec2 ec2:DescribeLaunchTemplateVersions ec2 ec2:DescribeLaunchTemplates ec2 ec2:DescribeRouteTables ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:GetConsoleOutput ec2 ec2:RebootInstances ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RevokeSecurityGroupIngress ec2 ec2:RevokeSecurityGroupIngress ec2 ec2:RunInstances ec2 iam:AddRoleToInstanceProfile iam iam:CreateInstanceProfile iam iam:CreateServiceLinkedRole iam iam:DeleteInstanceProfile iam iam:GetInstanceProfile iam iam:GetRole iam iam:PassRole iam iam:PassRole iam iam:RemoveRoleFromInstanceProfile iam