Action: sso-directory:DescribeDirectory Attached Policies Policy ARN Policy Name arn:aws:iam::aws:policy/AWSSSOReadOnly AWSSSOReadOnly Associated Services sso-directory