Policy: VPCLatticeReadOnlyAccess ARN: arn:aws:iam::aws:policy/VPCLatticeReadOnlyAccess Allowed Actions Actions Services acm:DescribeCertificate acm acm:ListCertificates acm cloudwatch:GetMetricData cloudwatch ec2:DescribeInstances ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcs ec2 elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing firehose:DescribeDeliveryStream firehose firehose:ListDeliveryStreams firehose lambda:ListAliases lambda lambda:ListFunctions lambda lambda:ListVersionsByFunction lambda logs:DescribeLogGroups logs logs:GetLogDelivery logs logs:ListLogDeliveries logs rds:DescribeDBClusters rds rds:DescribeDBInstances rds s3:ListAllMyBuckets s3 vpc-lattice:Get* vpc-lattice vpc-lattice:List* vpc-lattice