policy.json

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "1",
			"Effect": "Allow",
			"Action": [
				"apigateway:GET",
				"codecommit:ListRepositories",
				"codecommit:ListTagsForResource",
				"codebuild:ListProjects",
				"codedeploy:ListApplications",
				"codedeploy:ListDeploymentGroups",
				"cloudwatch:GetMetricStatistics",
				"cloudfront:ListDistributions",
				"cloudfront:ListFunctions",
				"cloudfront:ListTagsForResource",
				"cloudwatch:DescribeAlarms",
				"cloudwatch:ListTagsForResource",
				"cloudwatch:ListDashboards",
				"cloudwatch:ListMetricStreams",
				"dynamodb:DescribeTable",
				"dynamodb:ListTables",
				"sts:GetCallerIdentity",
				"dynamodb:ListTagsOfResource",
				"ec2:DescribeNetworkAcls",
				"ec2:DescribeAddresses",
				"config:BatchGetResourceConfig",
				"ec2:DescribeInstances",
				"ec2:DescribeInternetGateways",
				"ec2:DescribeKeyPairs",
				"ec2:DescribeNetworkInterfaces",
				"ec2:DescribePlacementGroups",
				"ec2:DescribeSecurityGroups",
				"ec2:DescribeSnapshots",
				"ec2:DescribeSpotInstanceRequests",
				"ec2:DescribeSubnets",
				"ec2:DescribeTransitGatewayVpcAttachments",
				"ec2:DescribeVolumes",
				"ec2:DescribeVpcEndpoints",
				"ec2:DescribeVpcPeeringConnections",
				"ec2:DescribeVpcs",
				"ecr:DescribeRepositories",
				"ecr:ListTagsForResource",
				"ecs:ListClusters",
				"ecs:ListContainerInstances",
				"eks:ListClusters",
				"eks:ListTagsForResource",
				"eks:DescribeCluster",
				"elasticache:DescribeCacheClusters",
				"elasticache:ListTagsForResource",
				"elasticloadbalancing:DescribeLoadBalancers",
				"elasticloadbalancing:DescribeTags",
				"elasticloadbalancing:DescribeListeners",
				"elasticloadbalancing:DescribeTargetGroups",
				"kafka:ListClustersV2",
				"kinesisanalytics:ListApplication",
				"firehose:ListDeliveryStreams",
				"ec2:DescribeNatGateways",
				"ec2:DescribeTransitGatewayPeeringAttachments",
				"WAFV2:ListWebACLs",
				"sns:ListSubscriptions",
				"iam:ListGroups",
				"iam:ListInstanceProfiles",
				"iam:ListOpenIDConnectProviders",
				"iam:GetOpenIDConnectProvider",
				"iam:ListPolicies",
				"iam:ListPolicyTags",
				"iam:ListRoles",
				"iam:ListSAMLProviders",
				"iam:ListSAMLProviderTags",
				"iam:ListUsers",
				"kinesis:ListStreams",
				"kinesis:ListStreamConsumers",
				"kms:ListKeys",
				"kms:ListResourceTags",
				"kms:DescribeKey",
				"rds:DescribeDBInstanceAutomatedBackups",
				"rds:DescribeDBClusterSnapshots",
				"rds:DescribeDBClusters",
				"rds:DescribeDBProxyEndpoints",
				"rds:ListTagsForResource",
				"rds:DescribeDBInstances",
				"rds:DescribeDBProxies",
				"rds:DescribeDBSnapshots",
				"redshift:DescribeEventSubscriptions",
				"s3:GetBucketTagging",
				"servicecatalog:SearchProductsAsAdmin",
				"sns:ListTopics",
				"sns:ListTagsForResource",
				"sqs:ListQueues",
				"sqs:ListQueueTags",
				"ssm:DescribeMaintenanceWindows",
				"pricing:GetProducts",
				"logs:DescribeLogGroups",
				"autoscaling:DescribeAutoScalingGroups",
				"ecs:ListTaskDefinitions",
				"elasticfilesystem:DescribeFileSystems",
				"elasticfilesystem:ListTagsForResource",
				"iam:ListInstanceProfileTags",
				"lambda:ListEventSourceMappings",
				"lambda:ListFunctions",
				"lambda:ListTags",
				"es:ListDomainNames",
				"es:DescribeDomains",
				"s3:ListAllMyBuckets",
				"secretsmanager:ListSecrets",
				"datasync:ListAgents",
				"cloudtrail:ListTrails"
			],
			"Resource": "*"
		}
	]
}