Amazon web services 应用程序负载平衡器的AWS完全访问策略

目前，我的AWS帐户具有以下策略：

• AmazonEC2FullAccess
• AmazonSQSFullAccess
• AmazonS3FullAccess
• AmazonaPigatewayInvokeLaccess
• CloudWatchFullAccess
• AmazonKinesisFullAccess
• AmazonRekognitionFullAccess
• AmazonKinesisVideoStreamsFullAccess
• Amazonkinesisfirehosevelaccess
• AmazonsFullAccess

为了在VPC中设置具有自动扩展组、目标组、子网的“应用程序负载平衡器”，我还需要哪些其他策略

AmazonVPCFullAccess,
AutoScalingFullAccess,
Application Load Balancer:
AssumeRolePolicyDocument={
    "Version": "2008-10-17",
    "Statement": [{
        "Effect": "Allow",
        "Principal": {"Service": ["ecs.amazonaws.com", "application-autoscaling.amazonaws.com"]},
        "Action": ["sts:AssumeRole"]
    }]
},
with ManagedPolicyArns
["arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceRole",
   "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceAutoscaleRole"]

编写具有最少权限访问的自定义策略可能更好