{"Version": "2012-10-17", "Statement": [{"Sid": "", "Effect": "Allow", "Action": ["secretsmanager:ListSecretVersionIds", "secretsmanager:GetSecretValue", "secretsmanager:GetResourcePolicy", "secretsmanager:DescribeSecret"], "Resource": ["arn:aws:secretsmanager:*:*:secret:prod/graphql-knowledge/SPOTIFY_CLIENT_ID*", "arn:aws:secretsmanager:*:*:secret:prod/graphql-knowledge/SPOTIFY_CLIENT_ID", "arn:aws:secretsmanager:*:*:secret:qa/graphql-knowledge/SPOTIFY_CLIENT_SECRET*", "arn:aws:secretsmanager:*:*:secret:qa/graphql-knowledge/SPOTIFY_CLIENT_SECRET"]}, {"Sid": "", "Effect": "Allow", "Action": "secretsmanager:GetRandomPassword", "Resource": "*"}]}