Policy attached to fabric client machine role that connects to Amazon Managed Blockchain networks.

AMBManagementMachinePolicy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ManageNetworkResources",
            "Effect": "Allow",
            "Action": [
                "managedblockchain:CreateProposal",
                "managedblockchain:GetProposal",
                "managedblockchain:DeleteMember",
                "managedblockchain:VoteOnProposal",
                "managedblockchain:ListProposals",
                "managedblockchain:GetNetwork",
                "managedblockchain:ListMembers",
                "managedblockchain:ListProposalVotes",
                "managedblockchain:RejectInvitation",
                "managedblockchain:GetNode",
                "managedblockchain:GetMember",
                "managedblockchain:DeleteNode",
                "managedblockchain:CreateNode",
                "managedblockchain:CreateMember",
                "managedblockchain:ListNodes"
            ],
            "Resource": [
                "arn:aws:managedblockchain:us-east-1::networks/*",
                "arn:aws:managedblockchain:us-east-1::proposals/*",
                "arn:aws:managedblockchain:us-east-1:123456789012:members/*",
                "arn:aws:managedblockchain:us-east-1:123456789012:invitations/*",
                "arn:aws:managedblockchain:us-east-1:123456789012:nodes/*"
            ]
        },
        {
            "Sid": "WorkWithNetworksForAcct",
            "Effect": "Allow",
            "Action": [
                "managedblockchain:ListNetworks",
                "managedblockchain:ListInvitations",
                "managedblockchain:CreateNetwork"
            ],
            "Resource": "*"
        },
        {
            "Sid": "AccessAmbBucket",
            "Effect": "Allow",
            "Action": [
                "s3:GetObject"
            ],
            "Resource": "arn:aws:s3:::us-east-1.managedblockchain/*"
        }
    ]
}