Policy: AmazonGrafanaCloudWatchAccess ARN: arn:aws:iam::aws:policy/service-role/AmazonGrafanaCloudWatchAccess Allowed Actions Actions Services cloudwatch:DescribeAlarmHistory cloudwatch cloudwatch:DescribeAlarms cloudwatch cloudwatch:DescribeAlarmsForMetric cloudwatch cloudwatch:GetInsightRuleReport cloudwatch cloudwatch:GetMetricData cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListMetrics cloudwatch ec2:DescribeInstances ec2 ec2:DescribeRegions ec2 ec2:DescribeTags ec2 logs:DescribeLogGroups logs logs:GetLogEvents logs logs:GetLogGroupFields logs logs:GetQueryResults logs logs:StartQuery logs logs:StopQuery logs oam:ListAttachedLinks oam oam:ListSinks oam tag:GetResources tag