Policy: AWSGreengrassResourceAccessRolePolicy ARN: arn:aws:iam::aws:policy/service-role/AWSGreengrassResourceAccessRolePolicy Allowed Actions Actions Services greengrass:* greengrass iot:DeleteThingShadow iot iot:DescribeCertificate iot iot:DescribeThing iot iot:GetThingShadow iot iot:UpdateThingShadow iot lambda:GetFunction lambda lambda:GetFunctionConfiguration lambda s3:GetBucketLocation s3 s3:GetObject s3 sagemaker:DescribeTrainingJob sagemaker secretsmanager:GetSecretValue secretsmanager