Policy: AWSServiceRoleForCodeWhispererPolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForCodeWhispererPolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch codeguru-security:CreateScan codeguru-security codeguru-security:CreateUploadUrl codeguru-security codeguru-security:GetFindings codeguru-security codeguru-security:GetScan codeguru-security codeguru-security:ListFindings codeguru-security sso:DescribeApplication sso sso:DescribeInstance sso sso:DescribeRegisteredRegions sso sso:GetManagedApplicationInstance sso sso:GetProfile sso sso:ListApplicationAssignments sso sso:ListDirectoryAssociations sso sso:ListProfileAssociations sso sso:ListProfiles sso sso-directory:ListMembersInGroup sso-directory