Policy: DataScientist ARN: arn:aws:iam::aws:policy/job-function/DataScientist Allowed Actions Actions Services autoscaling:* autoscaling cloudformation:CreateStack cloudformation cloudformation:DescribeStackEvents cloudformation cloudwatch:* cloudwatch datapipeline:Describe* datapipeline datapipeline:GetPipelineDefinition datapipeline datapipeline:ListPipelines datapipeline datapipeline:QueryObjects datapipeline dynamodb:* dynamodb ec2:CancelSpotFleetRequests ec2 ec2:CancelSpotInstanceRequests ec2 ec2:CreateTags ec2 ec2:DeleteTags ec2 ec2:Describe* ec2 ec2:ModifyImageAttribute ec2 ec2:ModifyInstanceAttribute ec2 ec2:ModifySpotFleetRequest ec2 ec2:RequestSpotFleet ec2 ec2:RequestSpotInstances ec2 ec2:RunInstances ec2 ec2:TerminateInstances ec2 elasticfilesystem:* elasticfilesystem elasticmapreduce:* elasticmapreduce es:* es firehose:* firehose fsx:DescribeFileSystems fsx iam:GetInstanceProfile iam iam:GetPolicy iam iam:GetPolicyVersion iam iam:GetRole iam iam:ListRoles iam iam:PassRole iam iam:PassRole iam kinesis:* kinesis kms:List* kms lambda:Create* lambda lambda:Delete* lambda lambda:Get* lambda lambda:InvokeFunction lambda lambda:List* lambda lambda:PublishVersion lambda lambda:Update* lambda logs:DescribeLogStreams logs logs:GetLogEvents logs machinelearning:* machinelearning rds:* rds redshift:* redshift s3:Abort* s3 s3:CreateBucket s3 s3:DeleteObject s3 s3:Get* s3 s3:List* s3 s3:PutAccelerateConfiguration s3 s3:PutBucketCors s3 s3:PutBucketLogging s3 s3:PutBucketNotification s3 s3:PutBucketTagging s3 s3:PutObject s3 s3:Replicate* s3 s3:RestoreObject s3 sagemaker:* sagemaker sagemaker:*App sagemaker sagemaker:*FlowDefinition sagemaker sagemaker:*FlowDefinitions sagemaker sagemaker:CreatePresignedDomainUrl sagemaker sagemaker:DescribeDomain sagemaker sagemaker:DescribeUserProfile sagemaker sagemaker:ListApps sagemaker sagemaker:ListDomains sagemaker sagemaker:ListUserProfiles sagemaker sdb:* sdb sns:CreateTopic sns sns:Get* sns sns:List* sns sns:ListSubscriptions sns sns:ListTopics sns