Policy: SecurityLakeServiceLinkedRole ARN: arn:aws:iam::aws:policy/aws-service-role/SecurityLakeServiceLinkedRole Allowed Actions Actions Services cloudtrail:CreateServiceLinkedChannel cloudtrail cloudtrail:DeleteServiceLinkedChannel cloudtrail cloudtrail:GetServiceLinkedChannel cloudtrail cloudtrail:ListServiceLinkedChannels cloudtrail cloudtrail:UpdateServiceLinkedChannel cloudtrail ec2:DescribeVpcs ec2 logs:CreateLogDelivery logs logs:DeleteLogDelivery logs organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:ListAccounts organizations organizations:ListDelegatedAdministrators organizations wafv2:DeleteLoggingConfiguration wafv2 wafv2:GetLoggingConfiguration wafv2 wafv2:ListLoggingConfigurations wafv2 wafv2:ListWebACLs wafv2 wafv2:PutLoggingConfiguration wafv2 wafv2:PutLoggingConfiguration wafv2