arn:aws:iam::aws:policy/job-function/Billing
"Resource":
s3:, lambda:, cloudwatch:, AWSSecretsManagerReadWriteAccess
Advertising: