Policy: AWSServiceCatalogAppRegistryServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSServiceCatalogAppRegistryServiceRolePolicy Allowed Actions Actions Services cloudformation:DescribeStacks cloudformation resource-groups:CreateGroup resource-groups resource-groups:DeleteGroup resource-groups resource-groups:GetGroup resource-groups resource-groups:GetGroupConfiguration resource-groups resource-groups:GetTags resource-groups resource-groups:Tag resource-groups resource-groups:Tag resource-groups resource-groups:Untag resource-groups resource-groups:UpdateGroup resource-groups