Policy: ResourceGroupsandTagEditorFullAccess ARN: arn:aws:iam::aws:policy/ResourceGroupsandTagEditorFullAccess Allowed Actions Actions Services cloudformation:DescribeStacks cloudformation cloudformation:ListStackResources cloudformation cloudformation:ListStacks cloudformation resource-groups:* resource-groups tag:TagResources tag tag:UntagResources tag tag:getResources tag tag:getTagKeys tag tag:getTagValues tag