Policy: AWSServiceCatalogAppRegistryFullAccess ARN: arn:aws:iam::aws:policy/AWSServiceCatalogAppRegistryFullAccess Allowed Actions Actions Services cloudformation:DescribeStacks cloudformation cloudformation:UpdateStack cloudformation iam:CreateServiceLinkedRole iam resource-groups:AssociateResource resource-groups resource-groups:CreateGroup resource-groups resource-groups:DeleteGroup resource-groups resource-groups:DisassociateResource resource-groups resource-groups:GetGroup resource-groups resource-groups:GetGroupConfiguration resource-groups resource-groups:GetTags resource-groups resource-groups:Tag resource-groups resource-groups:Untag resource-groups servicecatalog:AssociateAttributeGroup servicecatalog servicecatalog:AssociateResource servicecatalog servicecatalog:CreateApplication servicecatalog servicecatalog:CreateAttributeGroup servicecatalog servicecatalog:DeleteApplication servicecatalog servicecatalog:DeleteAttributeGroup servicecatalog servicecatalog:DisassociateAttributeGroup servicecatalog servicecatalog:DisassociateResource servicecatalog servicecatalog:GetApplication servicecatalog servicecatalog:GetAssociatedResource servicecatalog servicecatalog:GetAttributeGroup servicecatalog servicecatalog:GetConfiguration servicecatalog servicecatalog:ListApplications servicecatalog servicecatalog:ListAssociatedAttributeGroups servicecatalog servicecatalog:ListAssociatedResources servicecatalog servicecatalog:ListAttributeGroups servicecatalog servicecatalog:ListAttributeGroupsForApplication servicecatalog servicecatalog:ListTagsForResource servicecatalog servicecatalog:PutConfiguration servicecatalog servicecatalog:SyncResource servicecatalog servicecatalog:TagResource servicecatalog servicecatalog:UntagResource servicecatalog servicecatalog:UpdateApplication servicecatalog servicecatalog:UpdateAttributeGroup servicecatalog tag:GetResources tag