{ "Version": "2012-10-17", "Statement": [ { "Sid": "1", "Effect": "Allow", "Action": [ "apigateway:GET", "codecommit:ListRepositories", "codecommit:ListTagsForResource", "codebuild:ListProjects", "codedeploy:ListApplications", "codedeploy:ListDeploymentGroups", "cloudwatch:GetMetricStatistics", "cloudfront:ListDistributions", "cloudfront:ListFunctions", "cloudfront:ListTagsForResource", "cloudwatch:DescribeAlarms", "cloudwatch:ListTagsForResource", "cloudwatch:ListDashboards", "cloudwatch:ListMetricStreams", "dynamodb:DescribeTable", "dynamodb:ListTables", "sts:GetCallerIdentity", "dynamodb:ListTagsOfResource", "ec2:DescribeNetworkAcls", "ec2:DescribeAddresses", "config:BatchGetResourceConfig", "ec2:DescribeInstances", "ec2:DescribeInternetGateways", "ec2:DescribeKeyPairs", "ec2:DescribeNetworkInterfaces", "ec2:DescribePlacementGroups", "ec2:DescribeSecurityGroups", "ec2:DescribeSnapshots", "ec2:DescribeSpotInstanceRequests", "ec2:DescribeSubnets", "ec2:DescribeTransitGatewayVpcAttachments", "ec2:DescribeVolumes", "ec2:DescribeVpcEndpoints", "ec2:DescribeVpcPeeringConnections", "ec2:DescribeVpcs", "ecr:DescribeRepositories", "ecr:ListTagsForResource", "ecs:ListClusters", "ecs:ListContainerInstances", "eks:ListClusters", "eks:ListTagsForResource", "eks:DescribeCluster", "elasticache:DescribeCacheClusters", "elasticache:ListTagsForResource", "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeTags", "elasticloadbalancing:DescribeListeners", "elasticloadbalancing:DescribeTargetGroups", "kafka:ListClustersV2", "kinesisanalytics:ListApplication", "firehose:ListDeliveryStreams", "ec2:DescribeNatGateways", "ec2:DescribeTransitGatewayPeeringAttachments", "WAFV2:ListWebACLs", "sns:ListSubscriptions", "iam:ListGroups", "iam:ListInstanceProfiles", "iam:ListOpenIDConnectProviders", "iam:GetOpenIDConnectProvider", "iam:ListPolicies", "iam:ListPolicyTags", "iam:ListRoles", "iam:ListSAMLProviders", "iam:ListSAMLProviderTags", "iam:ListUsers", "kinesis:ListStreams", "kinesis:ListStreamConsumers", "kms:ListKeys", "kms:ListResourceTags", "kms:DescribeKey", "rds:DescribeDBInstanceAutomatedBackups", "rds:DescribeDBClusterSnapshots", "rds:DescribeDBClusters", "rds:DescribeDBProxyEndpoints", "rds:ListTagsForResource", "rds:DescribeDBInstances", "rds:DescribeDBProxies", "rds:DescribeDBSnapshots", "redshift:DescribeEventSubscriptions", "s3:GetBucketTagging", "servicecatalog:SearchProductsAsAdmin", "sns:ListTopics", "sns:ListTagsForResource", "sqs:ListQueues", "sqs:ListQueueTags", "ssm:DescribeMaintenanceWindows", "pricing:GetProducts", "logs:DescribeLogGroups", "autoscaling:DescribeAutoScalingGroups", "ecs:ListTaskDefinitions", "elasticfilesystem:DescribeFileSystems", "elasticfilesystem:ListTagsForResource", "iam:ListInstanceProfileTags", "lambda:ListEventSourceMappings", "lambda:ListFunctions", "lambda:ListTags", "es:ListDomainNames", "es:DescribeDomains", "s3:ListAllMyBuckets", "secretsmanager:ListSecrets", "datasync:ListAgents", "cloudtrail:ListTrails" ], "Resource": "*" } ] }