{"Statement": [{"Action": "secretsmanager:GetSecretValue", "Effect": "Allow", "Resource": ["arn:aws:secretsmanager:*:*:secret:prod/update-subaccount-id-mapping/*", "arn:aws:secretsmanager:*:*:secret:prod/update-subaccount-id-mapping/"], "Sid": ""}], "Version": "2012-10-17"}