Action: identitystore:Describe* Attached Policies Policy ARN Policy Name arn:aws:iam::aws:policy/AWSSSODirectoryReadOnly AWSSSODirectoryReadOnly Associated Services identitystore