Policy: AmazonCognitoPowerUser ARN: arn:aws:iam::aws:policy/AmazonCognitoPowerUser Allowed Actions Actions Services acm:ListCertificates acm cognito-identity:* cognito-identity cognito-idp:* cognito-idp cognito-sync:* cognito-sync iam:CreateServiceLinkedRole iam iam:DeleteServiceLinkedRole iam iam:GetRole iam iam:GetSAMLProvider iam iam:GetServiceLinkedRoleDeletionStatus iam iam:ListOpenIdConnectProviders iam iam:ListRoles iam iam:ListSAMLProviders iam kinesis:ListStreams kinesis lambda:GetPolicy lambda lambda:ListFunctions lambda mobiletargeting:GetApps mobiletargeting ses:GetIdentityVerificationAttributes ses ses:ListIdentities ses sms-voice:DescribeAccountAttributes sms-voice sns:GetSMSSandboxAccountStatus sns sns:ListPlatformApplications sns