{"Version":"2012-10-17","Statement":[{"Sid":"CostExplorerReadOnly","Effect":"Allow","Action":["ce:GetCostAndUsage","ce:GetCostForecast","ce:GetDimensionValues","ce:GetTags","ce:GetReservationUtilization","ce:GetSavingsPlansUtilization","ce:GetSavingsPlansUtilizationDetails"],"Resource":"*"},{"Sid":"EC2ReadOnly","Effect":"Allow","Action":["ec2:DescribeInstances","ec2:DescribeVolumes","ec2:DescribeSnapshots","ec2:DescribeAddresses","ec2:DescribeRegions","ec2:DescribeImages","ec2:DescribeNatGateways","ec2:DescribeTags","ec2:DescribeVolumesModifications","ec2:DescribeReservedInstances","ec2:DescribeReservedInstancesOfferings"],"Resource":"*"},{"Sid":"RDSReadOnly","Effect":"Allow","Action":["rds:DescribeDBInstances","rds:DescribeDBClusters","rds:ListTagsForResource"],"Resource":"*"},{"Sid":"RedshiftReadOnly","Effect":"Allow","Action":["redshift:DescribeClusters"],"Resource":"*"},{"Sid":"AutoScalingReadOnly","Effect":"Allow","Action":["autoscaling:DescribeAutoScalingGroups"],"Resource":"*"},{"Sid":"ECSReadOnly","Effect":"Allow","Action":["ecs:ListClusters","ecs:ListServices","ecs:DescribeServices"],"Resource":"*"},{"Sid":"LambdaReadOnly","Effect":"Allow","Action":["lambda:ListFunctions","lambda:GetFunction","lambda:ListTags"],"Resource":"*"},{"Sid":"S3ReadOnly","Effect":"Allow","Action":["s3:ListAllMyBuckets","s3:ListBucket","s3:GetBucketLocation","s3:GetBucketVersioning","s3:GetLifecycleConfiguration","s3:GetBucketTagging","s3:GetEncryptionConfiguration","s3:GetIntelligentTieringConfiguration","s3:ListBucketMultipartUploads"],"Resource":"*"},{"Sid":"ELBReadOnly","Effect":"Allow","Action":["elasticloadbalancing:DescribeLoadBalancers","elasticloadbalancing:DescribeTargetGroups","elasticloadbalancing:DescribeTargetHealth","elasticloadbalancing:DescribeLoadBalancerAttributes","elasticloadbalancing:DescribeListeners","elasticloadbalancing:DescribeTags"],"Resource":"*"},{"Sid":"CloudWatchLogsReadOnly","Effect":"Allow","Action":["logs:DescribeLogGroups"],"Resource":"*"},{"Sid":"CloudWatchReadOnly","Effect":"Allow","Action":["cloudwatch:GetMetricStatistics","cloudwatch:GetMetricData","cloudwatch:ListMetrics"],"Resource":"*"},{"Sid":"PricingReadOnly","Effect":"Allow","Action":["pricing:GetProducts","pricing:DescribeServices"],"Resource":"*"},{"Sid":"SavingsPlansReadOnly","Effect":"Allow","Action":["savingsplans:DescribeSavingsPlans","savingsplans:DescribeSavingsPlanRates","savingsplans:DescribeSavingsPlansOfferings"],"Resource":"*"},{"Sid":"AccountIdentity","Effect":"Allow","Action":["sts:GetCallerIdentity"],"Resource":"*"}]}