Policy: AWSServiceCatalogAdminFullAccess ARN: arn:aws:iam::aws:policy/AWSServiceCatalogAdminFullAccess Allowed Actions Actions Services cloudformation:CreateChangeSet cloudformation cloudformation:CreateStack cloudformation cloudformation:CreateStackInstances cloudformation cloudformation:CreateStackSet cloudformation cloudformation:CreateUploadBucket cloudformation cloudformation:DeleteChangeSet cloudformation cloudformation:DeleteStack cloudformation cloudformation:DeleteStackInstances cloudformation cloudformation:DeleteStackSet cloudformation cloudformation:DescribeChangeSet cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStackInstance cloudformation cloudformation:DescribeStackSet cloudformation cloudformation:DescribeStackSetOperation cloudformation cloudformation:DescribeStacks cloudformation cloudformation:ExecuteChangeSet cloudformation cloudformation:GetTemplateSummary cloudformation cloudformation:ListChangeSets cloudformation cloudformation:ListStackInstances cloudformation cloudformation:ListStackResources cloudformation cloudformation:ListStackSetOperationResults cloudformation cloudformation:ListStackSetOperations cloudformation cloudformation:SetStackPolicy cloudformation cloudformation:TagResource cloudformation cloudformation:UpdateStack cloudformation cloudformation:UpdateStackInstances cloudformation cloudformation:UpdateStackSet cloudformation cloudformation:ValidateTemplate cloudformation config:DescribeConfigurationRecorderStatus config config:DescribeConfigurationRecorders config iam:CreateServiceLinkedRole iam iam:GetGroup iam iam:GetRole iam iam:GetUser iam iam:ListGroups iam iam:ListRoles iam iam:ListUsers iam iam:PassRole iam servicecatalog:Accept* servicecatalog servicecatalog:Associate* servicecatalog servicecatalog:Batch* servicecatalog servicecatalog:Copy* servicecatalog servicecatalog:Create* servicecatalog servicecatalog:Delete* servicecatalog servicecatalog:Describe* servicecatalog servicecatalog:Disable* servicecatalog servicecatalog:Disassociate* servicecatalog servicecatalog:Enable* servicecatalog servicecatalog:Execute* servicecatalog servicecatalog:Get* servicecatalog servicecatalog:Import* servicecatalog servicecatalog:List* servicecatalog servicecatalog:Provision* servicecatalog servicecatalog:Put* servicecatalog servicecatalog:Reject* servicecatalog servicecatalog:Scan* servicecatalog servicecatalog:Search* servicecatalog servicecatalog:SyncResource servicecatalog servicecatalog:TagResource servicecatalog servicecatalog:Terminate* servicecatalog servicecatalog:UntagResource servicecatalog servicecatalog:Update* servicecatalog ssm:DescribeDocument ssm ssm:GetAutomationExecution ssm ssm:ListDocumentVersions ssm ssm:ListDocuments ssm