Policy: AWSAppMeshReadOnly ARN: arn:aws:iam::aws:policy/AWSAppMeshReadOnly Allowed Actions Actions Services acm:DescribeCertificate acm acm:ListCertificates acm acm-pca:DescribeCertificateAuthority acm-pca acm-pca:ListCertificateAuthorities acm-pca appmesh:Describe* appmesh appmesh:List* appmesh cloudformation:DescribeStack* cloudformation servicediscovery:ListInstances servicediscovery servicediscovery:ListNamespaces servicediscovery servicediscovery:ListServices servicediscovery