Policy: AWSServiceRoleForImageBuilder ARN: arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForImageBuilder Allowed Actions Actions Services ec2:CancelExportTask ec2 ec2:CopyImage ec2 ec2:CreateImage ec2 ec2:CreateLaunchTemplate ec2 ec2:CreateLaunchTemplateVersion ec2 ec2:CreateTags ec2 ec2:CreateTags ec2 ec2:CreateTags ec2 ec2:DeregisterImage ec2 ec2:DescribeExportImageTasks ec2 ec2:DescribeHosts ec2 ec2:DescribeImages ec2 ec2:DescribeImportImageTasks ec2 ec2:DescribeInstanceAttribute ec2 ec2:DescribeInstanceStatus ec2 ec2:DescribeInstanceTypeOfferings ec2 ec2:DescribeInstanceTypes ec2 ec2:DescribeInstances ec2 ec2:DescribeLaunchTemplateVersions ec2 ec2:DescribeLaunchTemplates ec2 ec2:DescribeSnapshots ec2 ec2:DescribeSubnets ec2 ec2:DescribeTags ec2 ec2:EnableFastLaunch ec2 ec2:ExportImage ec2 ec2:ExportImage ec2 ec2:ModifyImageAttribute ec2 ec2:ModifyLaunchTemplate ec2 ec2:ModifySnapshotAttribute ec2 ec2:RegisterImage ec2 ec2:RegisterImage ec2 ec2:RunInstances ec2 ec2:RunInstances ec2 ec2:StartInstances ec2 ec2:StopInstances ec2 ec2:TerminateInstances ec2 ecr:BatchDeleteImage ecr ecr:CreateRepository ecr ecr:TagResource ecr events:DeleteRule events events:DescribeRule events events:PutRule events events:PutTargets events events:RemoveTargets events iam:CreateServiceLinkedRole iam iam:PassRole iam inspector2:ListCoverage inspector2 inspector2:ListFindings inspector2 kms:CreateGrant kms kms:Decrypt kms kms:DescribeKey kms kms:Encrypt kms kms:GenerateDataKeyWithoutPlaintext kms kms:ReEncryptFrom kms kms:ReEncryptTo kms license-manager:UpdateLicenseSpecificationsForResource license-manager logs:CreateLogGroup logs logs:CreateLogStream logs logs:PutLogEvents logs sns:Publish sns ssm:AddTagsToResource ssm ssm:CreateAssociation ssm ssm:DeleteAssociation ssm ssm:DescribeAssociationExecutions ssm ssm:DescribeInstanceAssociationsStatus ssm ssm:DescribeInstanceInformation ssm ssm:GetAutomationExecution ssm ssm:GetCommandInvocation ssm ssm:ListCommandInvocations ssm ssm:ListCommands ssm ssm:ListInventoryEntries ssm ssm:SendAutomationSignal ssm ssm:SendCommand ssm ssm:SendCommand ssm ssm:StartAutomationExecution ssm ssm:StopAutomationExecution ssm sts:AssumeRole sts