Policy: AWSControlTowerAccountServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSControlTowerAccountServiceRolePolicy Allowed Actions Actions Services events:DeleteRule events events:DescribeRule events events:DisableRule events events:EnableRule events events:ListTargetsByRule events events:PutRule events events:PutTargets events events:RemoveTargets events securityhub:DescribeStandardsControls securityhub securityhub:GetEnabledStandards securityhub sns:publish sns