Status: IN
AWSLambdaVPCAccessExecutionRole grants nine actions: three `logs:` actions (same as basic) plus six `ec2:` actions (CreateNetworkInterface, DeleteNetworkInterface, DescribeNetworkInterfaces, DescribeSubnets, AssignPrivateIpAddresses, UnassignPrivateIpAddresses).
Source: entries/2026/03/12/aws-managed-policy-latest-reference-AWSLambdaVPCAccessExecutionRolehtml.md