Policy: AWSServiceRoleForMonitronPolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForMonitronPolicy Allowed Actions Actions Services sso:AssociateProfile sso sso:CreateApplicationAssignment sso sso:GetManagedApplicationInstance sso sso:GetProfile sso sso:ListApplicationAssignments sso sso:ListDirectoryAssociations sso sso:ListProfileAssociations sso sso:ListProfiles sso sso-directory:DescribeUsers sso-directory sso-directory:SearchUsers sso-directory