Policy: ServerMigrationServiceLaunchRole ARN: arn:aws:iam::aws:policy/service-role/ServerMigrationServiceLaunchRole Allowed Actions Actions Services applicationinsights:CreateApplication applicationinsights applicationinsights:CreateComponent applicationinsights applicationinsights:DeleteApplication applicationinsights applicationinsights:DeleteComponent applicationinsights applicationinsights:Describe* applicationinsights applicationinsights:List* applicationinsights applicationinsights:UpdateApplication applicationinsights applicationinsights:UpdateComponentConfiguration applicationinsights cloudformation:DescribeStacks cloudformation cloudformation:ListStackResources cloudformation ec2:AssociateIamInstanceProfile ec2 ec2:CreateTags ec2 ec2:Describe* ec2 ec2:DisassociateIamInstanceProfile ec2 ec2:ModifyInstanceAttribute ec2 ec2:ReplaceIamInstanceProfileAssociation ec2 ec2:RunInstances ec2 ec2:StartInstances ec2 ec2:StopInstances ec2 ec2:TerminateInstances ec2 iam:CreateServiceLinkedRole iam iam:PassRole iam resource-groups:CreateGroup resource-groups resource-groups:DeleteGroup resource-groups resource-groups:GetGroup resource-groups resource-groups:UpdateGroup resource-groups