Policy: AWSDirectoryServiceReadOnlyAccess ARN: arn:aws:iam::aws:policy/AWSDirectoryServiceReadOnlyAccess Allowed Actions Actions Services ds:Check* ds ds:Describe* ds ds:Get* ds ds:List* ds ds:Verify* ds ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:ListAWSServiceAccessForOrganization organizations sns:GetTopicAttributes sns sns:ListSubscriptions sns sns:ListSubscriptionsByTopic sns sns:ListTopics sns