ec2:CreateNetworkInterface
ec2:DescribeSecurityGroups
ec2:DescribeSubnets
ec2:DescribeVpcs
firehose:TagDeliveryStream
iam:AttachRolePolicy
iam:CreateServiceLinkedRole
iam:PassRole
iam:PutRolePolicy
logs:CreateLogDelivery
logs:DescribeLogGroups
logs:DescribeResourcePolicies
logs:GetLogDelivery
logs:ListLogDeliveries
logs:PutResourcePolicy
s3:GetBucketPolicy
s3:PutBucketPolicy
s3:GetObject
logs:DeleteLogDelivery
logs:ListLogDeliveries