Policy: AmazonCloudWatchRUMFullAccess ARN: arn:aws:iam::aws:policy/AmazonCloudWatchRUMFullAccess Allowed Actions Actions Services cloudwatch:DescribeAlarms cloudwatch cloudwatch:GetMetricData cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListMetrics cloudwatch cognito-identity:CreateIdentityPool cognito-identity cognito-identity:DescribeIdentityPool cognito-identity cognito-identity:GetIdentityPoolRoles cognito-identity cognito-identity:ListIdentityPools cognito-identity cognito-identity:SetIdentityPoolRoles cognito-identity iam:CreateServiceLinkedRole iam iam:GetRole iam iam:PassRole iam logs:CreateLogDelivery logs logs:CreateLogGroup logs logs:CreateLogStream logs logs:DeleteLogDelivery logs logs:DeleteLogGroup logs logs:DescribeLogGroups logs logs:DescribeResourcePolicies logs logs:GetLogDelivery logs logs:ListLogDeliveries logs logs:PutRetentionPolicy logs logs:UpdateLogDelivery logs rum:* rum synthetics:describeCanaries synthetics synthetics:describeCanariesLastRun synthetics