Policy: AmazonElasticFileSystemReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonElasticFileSystemReadOnlyAccess Allowed Actions Actions Services cloudwatch:DescribeAlarmsForMetric cloudwatch cloudwatch:GetMetricData cloudwatch ec2:DescribeAvailabilityZones ec2 ec2:DescribeNetworkInterfaceAttribute ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcs ec2 elasticfilesystem:DescribeAccessPoints elasticfilesystem elasticfilesystem:DescribeAccountPreferences elasticfilesystem elasticfilesystem:DescribeBackupPolicy elasticfilesystem elasticfilesystem:DescribeFileSystemPolicy elasticfilesystem elasticfilesystem:DescribeFileSystems elasticfilesystem elasticfilesystem:DescribeLifecycleConfiguration elasticfilesystem elasticfilesystem:DescribeMountTargetSecurityGroups elasticfilesystem elasticfilesystem:DescribeMountTargets elasticfilesystem elasticfilesystem:DescribeReplicationConfigurations elasticfilesystem elasticfilesystem:DescribeTags elasticfilesystem elasticfilesystem:ListTagsForResource elasticfilesystem elasticfilesystem:ReplicationRead elasticfilesystem kms:ListAliases kms