Policy: AmazonCognitoReadOnly ARN: arn:aws:iam::aws:policy/AmazonCognitoReadOnly Allowed Actions Actions Services cognito-identity:Describe* cognito-identity cognito-identity:Get* cognito-identity cognito-identity:List* cognito-identity cognito-idp:AdminGet* cognito-idp cognito-idp:AdminList* cognito-idp cognito-idp:Describe* cognito-idp cognito-idp:Get* cognito-idp cognito-idp:List* cognito-idp cognito-sync:Describe* cognito-sync cognito-sync:Get* cognito-sync cognito-sync:List* cognito-sync iam:ListOpenIdConnectProviders iam iam:ListRoles iam sns:ListPlatformApplications sns