{
  "Version" : "2012-10-17",
  "Statement" : [ {
    "Effect" : "Allow",
    "Principal" : {
      "AWS" : "arn:aws:iam::{{ caller_info.account }}:root"
    },
    "Action" : "secretsmanager:*",
    "Resource" : "*"
  } ]
}
