Policy: AmazonWorkSpacesSecureBrowserReadOnly ARN: arn:aws:iam::aws:policy/AmazonWorkSpacesSecureBrowserReadOnly Allowed Actions Actions Services ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 kinesis:ListStreams kinesis workspaces-web:GetBrowserSettings workspaces-web workspaces-web:GetIdentityProvider workspaces-web workspaces-web:GetIpAccessSettings workspaces-web workspaces-web:GetNetworkSettings workspaces-web workspaces-web:GetPortal workspaces-web workspaces-web:GetPortalServiceProviderMetadata workspaces-web workspaces-web:GetTrustStore workspaces-web workspaces-web:GetTrustStoreCertificate workspaces-web workspaces-web:GetUserAccessLoggingSettings workspaces-web workspaces-web:GetUserSettings workspaces-web workspaces-web:ListBrowserSettings workspaces-web workspaces-web:ListIdentityProviders workspaces-web workspaces-web:ListIpAccessSettings workspaces-web workspaces-web:ListNetworkSettings workspaces-web workspaces-web:ListPortals workspaces-web workspaces-web:ListTagsForResource workspaces-web workspaces-web:ListTrustStoreCertificates workspaces-web workspaces-web:ListTrustStores workspaces-web workspaces-web:ListUserAccessLoggingSettings workspaces-web workspaces-web:ListUserSettings workspaces-web