Policy: AmazonRDSReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonRDSReadOnlyAccess Allowed Actions Actions Services cloudwatch:GetMetricData cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:ListMetrics cloudwatch devops-guru:GetResourceCollection devops-guru devops-guru:ListAnomaliesForInsight devops-guru devops-guru:SearchInsights devops-guru ec2:DescribeAccountAttributes ec2 ec2:DescribeAvailabilityZones ec2 ec2:DescribeInternetGateways ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcAttribute ec2 ec2:DescribeVpcs ec2 logs:DescribeLogStreams logs logs:GetLogEvents logs rds:Describe* rds rds:ListTagsForResource rds