Policy: AWSShieldServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSShieldServiceRolePolicy Allowed Actions Actions Services cloudfront:GetDistribution cloudfront cloudfront:ListDistributions cloudfront wafv2:GetWebACL wafv2 wafv2:GetWebACLForResource wafv2 wafv2:ListResourcesForWebACL wafv2 wafv2:UpdateWebACL wafv2