Policy: AmazonOneEnterpriseReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonOneEnterpriseReadOnlyAccess Allowed Actions Actions Services one:Get* one one:List* one