Action: sso-directory:Get* Attached Policies Policy ARN Policy Name arn:aws:iam::aws:policy/AWSSSODirectoryReadOnly AWSSSODirectoryReadOnly Associated Services sso-directory