TagPoliciesServiceRolePolicy

{
    "PolicyVersion": {
        "Document": {
            "Version": "2012-10-17",
            "Statement": [
                {
                    "Action": [
                        "organizations:ListAccounts",
                        "organizations:ListAccountsForParent",
                        "organizations:ListChildren",
                        "organizations:DescribeAccount",
                        "organizations:DescribeOrganization",
                        "organizations:ListRoots",
                        "organizations:ListParents"
                    ],
                    "Effect": "Allow",
                    "Resource": [
                        "*"
                    ]
                },
                {
                    "Effect": "Allow",
                    "Action": [
                        "organizations:DisableAWSServiceAccess"
                    ],
                    "Resource": "*",
                    "Condition": {
                        "ForAllValues:StringLike": {
                            "organizations:ServicePrincipal": [
                                "tagpolicies.tag.amazonaws.com"
                            ]
                        }
                    }
                }
            ]
        },
        "VersionId": "v2",
        "IsDefaultVersion": true,
        "CreateDate": "2019-05-10T21:38:33Z"
    }
}