Policy: AWSResourceExplorerOrganizationsAccess ARN: arn:aws:iam::aws:policy/AWSResourceExplorerOrganizationsAccess Allowed Actions Actions Services ec2:DescribeRegions ec2 iam:CreateServiceLinkedRole iam iam:GetRole iam organizations:DeregisterDelegatedAdministrator organizations organizations:DescribeOrganization organizations organizations:DisableAWSServiceAccess organizations organizations:EnableAWSServiceAccess organizations organizations:ListAWSServiceAccessForOrganization organizations organizations:ListAccounts organizations organizations:ListAccountsForParent organizations organizations:ListDelegatedAdministrators organizations organizations:ListOrganizationalUnitsForParent organizations organizations:ListRoots organizations organizations:RegisterDelegatedAdministrator organizations ram:GetResourceShares ram ram:ListResources ram resource-explorer-2:* resource-explorer-2