Policy: AWSConfigUserAccess ARN: arn:aws:iam::aws:policy/AWSConfigUserAccess Allowed Actions Actions Services cloudtrail:DescribeTrails cloudtrail cloudtrail:GetTrailStatus cloudtrail cloudtrail:LookupEvents cloudtrail config:Deliver* config config:Describe* config config:Get* config config:List* config config:Select* config tag:GetResources tag tag:GetTagKeys tag