Policy: AWSSystemsManagerEnableConfigRecordingExecutionPolicy ARN: arn:aws:iam::aws:policy/AWSSystemsManagerEnableConfigRecordingExecutionPolicy Allowed Actions Actions Services config:DescribeConfigurationRecorders config config:DescribeDeliveryChannels config config:PutConfigurationRecorder config config:PutDeliveryChannel config config:StartConfigurationRecorder config iam:CreateServiceLinkedRole iam iam:GetRole iam iam:PassRole iam s3:CreateBucket s3 s3:ListBucket s3 s3:PutBucketPolicy s3 s3:PutBucketPublicAccessBlock s3 s3:PutEncryptionConfiguration s3 sns:CreateTopic sns sns:ListTopics sns