Policy: AWSDataSyncReadOnlyAccess ARN: arn:aws:iam::aws:policy/AWSDataSyncReadOnlyAccess Allowed Actions Actions Services datasync:Describe* datasync datasync:List* datasync ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 elasticfilesystem:DescribeFileSystems elasticfilesystem elasticfilesystem:DescribeMountTargets elasticfilesystem fsx:DescribeFileSystems fsx iam:GetRole iam iam:ListRoles iam logs:DescribeLogGroups logs logs:DescribeResourcePolicies logs s3:ListAllMyBuckets s3 s3:ListBucket s3