Policy: AWSLicenseManagerMasterAccountRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSLicenseManagerMasterAccountRolePolicy Allowed Actions Actions Services athena:GetQueryExecution athena athena:GetQueryResults athena athena:StartQueryExecution athena cloudformation:CreateStack cloudformation cloudformation:DeleteStack cloudformation cloudformation:DescribeStacks cloudformation cloudformation:UpdateStack cloudformation glue:CreateTable glue glue:DeleteTable glue glue:GetPartition glue glue:GetPartitions glue glue:GetTable glue glue:UpdateCrawler glue glue:UpdateJob glue glue:UpdateTable glue iam:GetRole iam iam:PassRole iam organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:ListAWSServiceAccessForOrganization organizations organizations:ListAccounts organizations organizations:ListAccountsForParent organizations organizations:ListChildren organizations organizations:ListParents organizations organizations:ListRoots organizations ram:AssociateResourceShare ram ram:CreateResourceShare ram ram:DeleteResourceShare ram ram:DisassociateResourceShare ram ram:GetResourceShareAssociations ram ram:GetResourceShares ram ram:TagResource ram ram:UpdateResourceShare ram resource-groups:PutGroupPolicy resource-groups s3:AbortMultipartUpload s3 s3:DeleteObject s3 s3:GetBucketLocation s3 s3:GetBucketPolicy s3 s3:GetLifecycleConfiguration s3 s3:GetObject s3 s3:ListBucket s3 s3:ListBucketMultipartUploads s3 s3:ListMultipartUploadParts s3 s3:PutBucketPolicy s3 s3:PutLifecycleConfiguration s3 s3:PutObject s3