I’m trying to use the AWS CLI, specifically the command “aws organizations describe-account” and am unsure which IAM policy to attach to my IAM role. Currently my role only has the AmazonEC2FullAccess policy. AWSOrganizationsReadOnlyAccess was my first guess, but that doesn’t provide the required access. Neither does AWSOrganizationsFullAccess.