{"Version": "2012-10-17", "Statement": [{"Sid": "", "Effect": "Allow", "Action": ["secretsmanager:ListSecretVersionIds", "secretsmanager:GetSecretValue", "secretsmanager:GetResourcePolicy", "secretsmanager:DescribeSecret"], "Resource": ["arn:aws:secretsmanager:*:*:secret:prod/ows-product-workflow-ecr/*", "arn:aws:secretsmanager:*:*:secret:prod/ows-product-workflow-ecr/"]}, {"Sid": "", "Effect": "Allow", "Action": "secretsmanager:GetRandomPassword", "Resource": "*"}]}