Policy: AppStudioServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AppStudioServiceRolePolicy Allowed Actions Actions Services logs:CreateLogGroup logs logs:CreateLogStream logs logs:PutLogEvents logs secretsmanager:CreateSecret secretsmanager secretsmanager:CreateSecret secretsmanager secretsmanager:DeleteSecret secretsmanager secretsmanager:DeleteSecret secretsmanager secretsmanager:DescribeSecret secretsmanager secretsmanager:DescribeSecret secretsmanager secretsmanager:GetSecretValue secretsmanager secretsmanager:GetSecretValue secretsmanager secretsmanager:PutSecretValue secretsmanager secretsmanager:PutSecretValue secretsmanager secretsmanager:TagResource secretsmanager secretsmanager:UpdateSecret secretsmanager secretsmanager:UpdateSecret secretsmanager sso:GetManagedApplicationInstance sso sso-directory:DescribeUsers sso-directory sso-directory:ListMembersInGroup sso-directory