Policy: AWSCleanRoomsFullAccess ARN: arn:aws:iam::aws:policy/AWSCleanRoomsFullAccess Allowed Actions Actions Services cleanrooms:* cleanrooms glue:BatchGetPartition glue glue:GetDatabase glue glue:GetDatabases glue glue:GetPartition glue glue:GetPartitions glue glue:GetSchema glue glue:GetSchemaVersion glue glue:GetTable glue glue:GetTables glue iam:GetPolicy iam iam:GetPolicyVersion iam iam:GetRole iam iam:ListAttachedRolePolicies iam iam:ListPolicies iam iam:ListRolePolicies iam iam:ListRoles iam iam:PassRole iam logs:CreateLogDelivery logs logs:CreateLogGroup logs logs:DeleteLogDelivery logs logs:DescribeLogGroups logs logs:DescribeResourcePolicies logs logs:GetLogDelivery logs logs:GetQueryResults logs logs:ListLogDeliveries logs logs:PutResourcePolicy logs logs:StartQuery logs logs:UpdateLogDelivery logs s3:GetBucketLocation s3 s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:ListBucketVersions s3 s3:PutObject s3