Policy: AWSMigrationHubOrchestratorConsoleFullAccess ARN: arn:aws:iam::aws:policy/AWSMigrationHubOrchestratorConsoleFullAccess Allowed Actions Actions Services account:ListRegions account discovery:DescribeConfigurations discovery discovery:GetDiscoverySummary discovery discovery:ListConfigurations discovery ec2:DescribeInstances ec2 ec2:DescribeVpcs ec2 ecs:ListClusters ecs iam:CreateServiceLinkedRole iam iam:GetRole iam iam:ListInstanceProfiles iam iam:ListRoles iam kms:ListAliases kms kms:ListKeys kms mgh:GetHomeRegion mgh migrationhub-orchestrator:* migrationhub-orchestrator s3:GetBucketAcl s3 s3:GetBucketLocation s3 s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:ListBucketVersions s3 s3:PutObject s3 secretsmanager:ListSecrets secretsmanager