Policy: AWSResourceExplorerFullAccess ARN: arn:aws:iam::aws:policy/AWSResourceExplorerFullAccess Allowed Actions Actions Services ec2:DescribeRegions ec2 iam:CreateServiceLinkedRole iam organizations:DescribeOrganization organizations ram:GetResourceShares ram ram:ListResources ram resource-explorer-2:* resource-explorer-2