2 actions in the consoleapp service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to retrieve the device identity for a Console Mobile App device
Grants permission to retrieve a list of device identities