arn:aws:iam::aws:policy/job-function/Billing
arn:aws:iam::aws:policy/
"Resource":
s3:, lambda:, cloudwatch:, AWSSecretsManagerReadWriteAccess
Advertising: