Policy: AmazonAppFlowFullAccess ARN: arn:aws:iam::aws:policy/AmazonAppFlowFullAccess Allowed Actions Actions Services appflow:* appflow iam:ListRoles iam kms:CreateGrant kms kms:DescribeKey kms kms:ListAliases kms kms:ListGrants kms kms:ListKeys kms lambda:ListFunctions lambda s3:GetBucketLocation s3 s3:GetBucketPolicy s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:PutBucketPolicy s3 secretsmanager:CreateSecret secretsmanager secretsmanager:PutResourcePolicy secretsmanager