Policy: KafkaServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/KafkaServiceRolePolicy Allowed Actions Actions Services acm-pca:GetCertificateAuthorityCertificate acm-pca ec2:AttachNetworkInterface ec2 ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterfacePermission ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteVpcEndpoints ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeVpcEndpoints ec2 ec2:DetachNetworkInterface ec2 ec2:ModifyVpcEndpoint ec2 ec2:ModifyVpcEndpoint ec2 secretsmanager:DeleteResourcePolicy secretsmanager secretsmanager:DescribeSecret secretsmanager secretsmanager:GetResourcePolicy secretsmanager secretsmanager:ListSecrets secretsmanager secretsmanager:PutResourcePolicy secretsmanager