Policy: AmazonCloudWatchEvidentlyFullAccess ARN: arn:aws:iam::aws:policy/AmazonCloudWatchEvidentlyFullAccess Allowed Actions Actions Services cloudtrail:LookupEvents cloudtrail cloudwatch:DescribeAlarmHistory cloudwatch cloudwatch:DescribeAlarms cloudwatch cloudwatch:DescribeAlarmsForMetric cloudwatch cloudwatch:GetMetricData cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListTagsForResource cloudwatch cloudwatch:PutMetricAlarm cloudwatch cloudwatch:TagResource cloudwatch cloudwatch:UnTagResource cloudwatch evidently:* evidently iam:GetRole iam iam:ListRoles iam logs:DescribeLogGroups logs s3:GetBucketLocation s3 s3:ListAllMyBuckets s3 sns:CreateTopic sns sns:ListSubscriptionsByTopic sns sns:ListTopics sns sns:Subscribe sns