{"Statement": [{"Action": ["secretsmanager:ListSecretVersionIds", "secretsmanager:GetSecretValue", "secretsmanager:GetResourcePolicy", "secretsmanager:DescribeSecret"], "Effect": "Allow", "Resource": ["arn:aws:secretsmanager:*:*:secret:prod/ows-dmp/SNOWFLAKE_DELPHI_PASSWORD-*", "arn:aws:secretsmanager:*:*:secret:prod/ows-dmp-workflows/*", "arn:aws:secretsmanager:*:*:secret:prod/ows-dmp-workflows/"]}, {"Action": "secretsmanager:GetRandomPassword", "Effect": "Allow", "Resource": "*"}], "Version": "2012-10-17"}