"{
    \"Version\": \"2012-10-17\",
    \"Statement\": [
        {
            \"Effect\": \"Allow\",
            \"Action\": [
                \"secretsmanager:ListSecrets\",
                \"secretsmanager:GetRandomPassword\"
            ],
            \"Resource\": \"*\"
        },
        {
            \"Effect\": \"Allow\",
            \"Action\": [
                \"kms:Decrypt\"
            ],
            \"Resource\": \"arn:aws:kms:us-east-1:12345678910:key/24260438-1817-4e0b-897c-7f7958edba98\"
        },
        {
            \"Effect\": \"Allow\",
            \"Action\": [
                \"kms:List*\"
            ],
            \"Resource\": \"*\"
        },
        {
            \"Effect\": \"Allow\",
            \"Action\": [
                \"secretsmanager:GetResourcePolicy\",
                \"secretsmanager:GetSecretValue\",
                \"secretsmanager:DescribeSecret\",
                \"secretsmanager:ListSecretVersionIds\"
            ],
            \"Resource\": \"*\",
            \"Condition\": {
                \"ForAnyValue:StringEquals\": {
                    \"secretsmanager:ResourceTag/Name\": user_name
                }
            }
        }
    ]
}"