Some Amazon Pinpoint actions, such as certain actions for creating resources, can't be performed on a specific resource. In those cases, you must use the wildcard (*): Reference: * https://docs.aws.amazon.com/pinpoint/latest/developerguide/security_iam_service-with-iam.html