Policy: AWSServiceCatalogEndUserReadOnlyAccess ARN: arn:aws:iam::aws:policy/AWSServiceCatalogEndUserReadOnlyAccess Allowed Actions Actions Services cloudformation:DescribeChangeSet cloudformation cloudformation:DescribeStackEvents cloudformation cloudformation:DescribeStackInstance cloudformation cloudformation:DescribeStackSet cloudformation cloudformation:DescribeStackSetOperation cloudformation cloudformation:DescribeStacks cloudformation cloudformation:GetTemplateSummary cloudformation cloudformation:ListChangeSets cloudformation cloudformation:ListStackInstances cloudformation cloudformation:ListStackResources cloudformation cloudformation:ListStackSetOperationResults cloudformation cloudformation:ListStackSetOperations cloudformation config:DescribeConfigurationRecorderStatus config config:DescribeConfigurationRecorders config servicecatalog:DescribeProduct servicecatalog servicecatalog:DescribeProductView servicecatalog servicecatalog:DescribeProvisionedProduct servicecatalog servicecatalog:DescribeProvisionedProductPlan servicecatalog servicecatalog:DescribeProvisioningParameters servicecatalog servicecatalog:DescribeRecord servicecatalog servicecatalog:DescribeServiceActionExecutionParameters servicecatalog servicecatalog:ListLaunchPaths servicecatalog servicecatalog:ListProvisionedProductPlans servicecatalog servicecatalog:ListRecordHistory servicecatalog servicecatalog:ListServiceActionsForProvisioningArtifact servicecatalog servicecatalog:ListStackInstancesForProvisionedProduct servicecatalog servicecatalog:ScanProvisionedProducts servicecatalog servicecatalog:SearchProducts servicecatalog servicecatalog:SearchProvisionedProducts servicecatalog ssm:DescribeDocument ssm ssm:GetAutomationExecution ssm