Policy: AIOpsConsoleAdminPolicy ARN: arn:aws:iam::aws:policy/AIOpsConsoleAdminPolicy Allowed Actions Actions Services aiops:* aiops chatbot:DescribeChimeWebhookConfigurations chatbot chatbot:DescribeSlackChannelConfigurations chatbot chatbot:DescribeSlackWorkspaces chatbot chatbot:ListMicrosoftTeamsChannelConfigurations chatbot chatbot:ListMicrosoftTeamsConfiguredTeams chatbot cloudtrail:DescribeTrails cloudtrail cloudtrail:ListEventDataStores cloudtrail cloudtrail:ListTrails cloudtrail iam:CreatePolicy iam iam:ListRoles iam iam:PassRole iam iam:PassRole iam identitystore:DescribeUser identitystore kms:ListAliases kms organizations:DescribeOrganization organizations organizations:ListAWSServiceAccessForOrganization organizations secretsmanager:CreateSecret secretsmanager secretsmanager:DeleteSecret secretsmanager secretsmanager:PutResourcePolicy secretsmanager secretsmanager:UpdateSecret secretsmanager signin:ListTrustedIdentityPropagationApplicationsForConsole signin ssm:AddTagsToResource ssm ssm:CreateOpsItem ssm ssm:GetServiceSetting ssm ssm:UpdateServiceSetting ssm sso:CreateApplication sso sso:DeleteApplication sso sso:DescribeInstance sso sso:DescribeRegisteredRegions sso sso:GetSSOStatus sso sso:GetSharedSsoConfiguration sso sso:ListApplications sso sso:ListInstances sso sso:PutApplicationAccessScope sso sso:PutApplicationAssignmentConfiguration sso sso:PutApplicationAuthenticationMethod sso sso:PutApplicationGrant sso sso:TagResource sso sso:TagResource sso sso-directory:DescribeUsers sso-directory sts:SetContext sts tag:GetTagKeys tag