Policy: AmazonWorkMailReadOnlyAccess ARN: arn:aws:iam::aws:policy/AmazonWorkMailReadOnlyAccess Allowed Actions Actions Services cloudwatch:GetMetricData cloudwatch iam:ListRoles iam lambda:ListFunctions lambda logs:DescribeLogGroups logs ses:Describe* ses ses:Get* ses workmail:Describe* workmail workmail:Get* workmail workmail:List* workmail workmail:Search* workmail