Policy: AmazonDevOpsGuruReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonDevOpsGuruReadOnlyAccess Allowed Actions Actions Services cloudformation:DescribeStacks cloudformation cloudformation:ListStacks cloudformation cloudwatch:GetMetricData cloudwatch devops-guru:DescribeAccountHealth devops-guru devops-guru:DescribeAccountOverview devops-guru devops-guru:DescribeAnomaly devops-guru devops-guru:DescribeEventSourcesConfig devops-guru devops-guru:DescribeFeedback devops-guru devops-guru:DescribeInsight devops-guru devops-guru:DescribeResourceCollectionHealth devops-guru devops-guru:DescribeServiceIntegration devops-guru devops-guru:GetCostEstimation devops-guru devops-guru:GetResourceCollection devops-guru devops-guru:ListAnomaliesForInsight devops-guru devops-guru:ListAnomalousLogGroups devops-guru devops-guru:ListEvents devops-guru devops-guru:ListInsights devops-guru devops-guru:ListMonitoredResources devops-guru devops-guru:ListNotificationChannels devops-guru devops-guru:ListRecommendations devops-guru devops-guru:SearchInsights devops-guru devops-guru:StartCostEstimation devops-guru iam:GetRole iam logs:FilterLogEvents logs rds:DescribeDBInstances rds