Policy: IAMAccessAnalyzerFullAccess ARN: arn:aws:iam::aws:policy/IAMAccessAnalyzerFullAccess Allowed Actions Actions Services access-analyzer:* access-analyzer iam:CreateServiceLinkedRole iam organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:DescribeOrganizationalUnit organizations organizations:ListAWSServiceAccessForOrganization organizations organizations:ListAccounts organizations organizations:ListAccountsForParent organizations organizations:ListChildren organizations organizations:ListDelegatedAdministrators organizations organizations:ListOrganizationalUnitsForParent organizations organizations:ListParents organizations organizations:ListRoots organizations