Policy: ClientVPNServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/ClientVPNServiceRolePolicy Allowed Actions Actions Services acm:DescribeCertificate acm acm:GetCertificate acm ds:AuthorizeApplication ds ds:DescribeDirectories ds ds:GetDirectoryLimits ds ds:UnauthorizeApplication ds ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterfacePermission ec2 ec2:DeleteNetworkInterface ec2 ec2:DescribeAccountAttributes ec2 ec2:DescribeInternetGateways ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:ModifyNetworkInterfaceAttribute ec2 iam:GetSAMLProvider iam lambda:GetFunctionConfiguration lambda logs:CreateLogStream logs logs:DescribeLogGroups logs logs:DescribeLogStreams logs logs:PutLogEvents logs