{"Version": "2012-10-17", "Statement": [{"Effect": "Allow", "Action": ["secretsmanager:ListSecretVersionIds", "secretsmanager:GetSecretValue", "secretsmanager:GetResourcePolicy", "secretsmanager:DescribeSecret"], "Resource": ["arn:aws:secretsmanager:*:*:secret:qa/elasticsearch_analytics/*", "arn:aws:secretsmanager:*:*:secret:qa/elasticsearch_analytics/"]}, {"Effect": "Allow", "Action": "secretsmanager:GetRandomPassword", "Resource": "*"}]}