Policy: ROSAControlPlaneOperatorPolicy ARN: arn:aws:iam::aws:policy/service-role/ROSAControlPlaneOperatorPolicy Allowed Actions Actions Services ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateSecurityGroup ec2 ec2:CreateSecurityGroup ec2 ec2:CreateTags ec2 ec2:CreateVpcEndpoint ec2 ec2:CreateVpcEndpoint ec2 ec2:CreateVpcEndpoint ec2 ec2:DeleteSecurityGroup ec2 ec2:DeleteVpcEndpoints ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeVpcEndpoints ec2 ec2:DescribeVpcs ec2 ec2:ModifyVpcEndpoint ec2 ec2:ModifyVpcEndpoint ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RevokeSecurityGroupIngress ec2 route53:ChangeResourceRecordSets route53 route53:ListHostedZones route53 route53:ListResourceRecordSets route53