Policy: AmazonFSxConsoleReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonFSxConsoleReadOnlyAccess Allowed Actions Actions Services cloudwatch:DescribeAlarms cloudwatch cloudwatch:GetMetricData cloudwatch ds:DescribeDirectories ds ec2:DescribeNetworkInterfaceAttribute ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:GetSecurityGroupsForVpc ec2 firehose:ListDeliveryStreams firehose fsx:Describe* fsx fsx:ListTagsForResource fsx kms:DescribeKey kms logs:DescribeLogGroups logs