Policy: AWSOpsWorksCMInstanceProfileRole ARN: arn:aws:iam::aws:policy/AWSOpsWorksCMInstanceProfileRole Allowed Actions Actions Services acm:GetCertificate acm cloudformation:DescribeStackResource cloudformation cloudformation:SignalResource cloudformation s3:AbortMultipartUpload s3 s3:DeleteObject s3 s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:ListMultipartUploadParts s3 s3:PutObject s3 secretsmanager:GetSecretValue secretsmanager