ManagedPolicyArns:
  - !Sub arn:${AWS::Partition}:iam::aws:policy/job-function/ViewOnlyAccess