Policy: CloudFrontFullAccess ARN: arn:aws:iam::aws:policy/CloudFrontFullAccess Allowed Actions Actions Services acm:ListCertificates acm cloudfront:* cloudfront cloudfront-keyvaluestore:* cloudfront-keyvaluestore ec2:DescribeInstances ec2 ec2:DescribeInternetGateways ec2 elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing iam:ListRoles iam iam:ListServerCertificates iam kinesis:DescribeStream kinesis kinesis:ListStreams kinesis s3:ListAllMyBuckets s3 waf:GetWebACL waf waf:ListWebACLs waf wafv2:GetWebACL wafv2 wafv2:ListWebACLs wafv2