Policy: AWSLakeFormationCrossAccountManager ARN: arn:aws:iam::aws:policy/AWSLakeFormationCrossAccountManager Allowed Actions Actions Services glue:DeleteResourcePolicy glue glue:PutResourcePolicy glue organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:ListAccountsForParent organizations organizations:ListOrganizationalUnitsForParent organizations organizations:ListRoots organizations ram:AssociateResourceShare ram ram:AssociateResourceSharePermission ram ram:CreateResourceShare ram ram:DeleteResourceShare ram ram:DisassociateResourceShare ram ram:Get* ram ram:GetResourceShares ram ram:List* ram ram:UpdateResourceShare ram