Policy: AWSShieldDRTAccessPolicy ARN: arn:aws:iam::aws:policy/service-role/AWSShieldDRTAccessPolicy Allowed Actions Actions Services apigateway:SetWebACL apigateway cloudfront:GetDistribution* cloudfront cloudfront:List* cloudfront cloudfront:UpdateDistribution cloudfront cloudwatch:Describe* cloudwatch cloudwatch:Get* cloudwatch cloudwatch:List* cloudwatch ec2:DescribeAddresses ec2 ec2:DescribeRegions ec2 elasticloadbalancing:Describe* elasticloadbalancing elasticloadbalancing:SetWebACL elasticloadbalancing globalaccelerator:DescribeAccelerator globalaccelerator globalaccelerator:ListAccelerators globalaccelerator route53:List* route53 shield:* shield waf:* waf waf-regional:* waf-regional wafv2:* wafv2