Policy: AmazonDevOpsGuruConsoleFullAccess ARN: arn:aws:iam::aws:policy/AmazonDevOpsGuruConsoleFullAccess Allowed Actions Actions Services cloudformation:DescribeStacks cloudformation cloudformation:ListStacks cloudformation cloudwatch:GetMetricData cloudwatch devops-guru:* devops-guru iam:CreateServiceLinkedRole iam iam:DeleteServiceLinkedRole iam iam:GetServiceLinkedRoleDeletionStatus iam logs:FilterLogEvents logs pi:DescribeDimensionKeys pi pi:GetResourceMetrics pi rds:DescribeDBInstances rds sns:CreateTopic sns sns:GetTopicAttributes sns sns:ListTopics sns sns:Publish sns sns:SetTopicAttributes sns