Policy: CloudTrailServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/CloudTrailServiceRolePolicy Allowed Actions Actions Services cloudtrail:* cloudtrail glue:DeleteTable glue lakeformation:DeregisterResource lakeformation organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:ListAWSServiceAccessForOrganization organizations organizations:ListAccounts organizations organizations:ListDelegatedAdministrators organizations