Policy: CloudWatchNetworkMonitorServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/CloudWatchNetworkMonitorServiceRolePolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:AuthorizeSecurityGroupEgress ec2 ec2:CreateNetworkInterfacePermission ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteNetworkInterfacePermission ec2 ec2:DeleteSecurityGroup ec2 ec2:DescribeNetworkInterfaceAttribute ec2 ec2:DescribeNetworkInterfacePermissions ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:ModifyNetworkInterfaceAttribute ec2 ec2:RevokeSecurityGroupEgress ec2