- Effect: Allow
  Action:
  - secretsmanager:GetResourcePolicy
  - secretsmanager:GetSecretValue
  - secretsmanager:DescribeSecret
  - secretsmanager:ListSecretVersionIds
  Resource: {{secretsmanager}}
- Effect: Allow
  Action:
  - secretsmanager:GetRandomPassword
  - secretsmanager:ListSecrets
  Resource: 
  - "*"