{"Version": "2012-10-17", "Statement": [{"Sid": "", "Effect": "Allow", "Action": ["secretsmanager:ListSecretVersionIds", "secretsmanager:GetSecretValue", "secretsmanager:GetResourcePolicy", "secretsmanager:DescribeSecret"], "Resource": ["arn:aws:secretsmanager:*:*:secret:prod/github-orchardci/*", "arn:aws:secretsmanager:*:*:secret:prod/github-orchardci"]}, {"Sid": "", "Effect": "Allow", "Action": "secretsmanager:GetRandomPassword", "Resource": "*"}]}