Policy: AmazonDataZoneRedshiftGlueProvisioningPolicy ARN: arn:aws:iam::aws:policy/AmazonDataZoneRedshiftGlueProvisioningPolicy Allowed Actions Actions Services athena:CreateWorkGroup athena athena:DeleteWorkGroup athena athena:GetWorkGroup athena athena:TagResource athena cloudformation:CreateStack cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStacks cloudformation cloudformation:TagResource cloudformation glue:CreateDatabase glue glue:DeleteDatabase glue glue:GetDatabase glue glue:TagResource glue iam:AttachRolePolicy iam iam:CreatePolicy iam iam:CreateRole iam iam:DeletePolicy iam iam:DeletePolicyVersion iam iam:DeleteRole iam iam:DeleteRolePolicy iam iam:DetachRolePolicy iam iam:GetPolicy iam iam:GetRole iam iam:ListPolicyVersions iam iam:PassRole iam iam:PutRolePolicy iam iam:TagPolicy iam iam:TagRole iam kms:Decrypt kms kms:GenerateDataKey kms lakeformation:DeregisterResource lakeformation lakeformation:GetDataLakeSettings lakeformation lakeformation:GrantPermissions lakeformation lakeformation:ListPermissions lakeformation lakeformation:ListResources lakeformation lakeformation:PutDataLakeSettings lakeformation lakeformation:RegisterResource lakeformation lakeformation:RevokePermissions lakeformation logs:CreateLogGroup logs logs:DeleteLogGroup logs logs:DescribeLogGroups logs logs:PutRetentionPolicy logs logs:TagLogGroup logs redshift:DescribeClusters redshift redshift-data:DescribeStatement redshift-data redshift-data:ExecuteStatement redshift-data redshift-data:ListSchemas redshift-data redshift-serverless:GetNamespace redshift-serverless redshift-serverless:GetWorkgroup redshift-serverless s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 secretsmanager:GetSecretValue secretsmanager secretsmanager:ListSecrets secretsmanager