Policy: AmazonDynamoDBReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonDynamoDBReadOnlyAccess Allowed Actions Actions Services application-autoscaling:DescribeScalableTargets application-autoscaling application-autoscaling:DescribeScalingActivities application-autoscaling application-autoscaling:DescribeScalingPolicies application-autoscaling cloudwatch:DescribeAlarmHistory cloudwatch cloudwatch:DescribeAlarms cloudwatch cloudwatch:DescribeAlarmsForMetric cloudwatch cloudwatch:GetInsightRuleReport cloudwatch cloudwatch:GetMetricData cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListMetrics cloudwatch datapipeline:DescribeObjects datapipeline datapipeline:DescribePipelines datapipeline datapipeline:GetPipelineDefinition datapipeline datapipeline:ListPipelines datapipeline datapipeline:QueryObjects datapipeline dax:BatchGetItem dax dax:Describe* dax dax:GetItem dax dax:List* dax dax:Query dax dax:Scan dax dynamodb:BatchGetItem dynamodb dynamodb:Describe* dynamodb dynamodb:GetAbacStatus dynamodb dynamodb:GetItem dynamodb dynamodb:GetResourcePolicy dynamodb dynamodb:List* dynamodb dynamodb:PartiQLSelect dynamodb dynamodb:Query dynamodb dynamodb:Scan dynamodb ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 iam:GetRole iam iam:ListRoles iam kinesis:DescribeStream kinesis kinesis:DescribeStreamSummary kinesis kinesis:ListStreams kinesis kms:DescribeKey kms kms:ListAliases kms lambda:GetFunctionConfiguration lambda lambda:ListEventSourceMappings lambda lambda:ListFunctions lambda resource-groups:GetGroup resource-groups resource-groups:GetGroupQuery resource-groups resource-groups:ListGroupResources resource-groups resource-groups:ListGroups resource-groups sns:ListSubscriptionsByTopic sns sns:ListTopics sns tag:GetResources tag