Policy: CloudFrontReadOnlyAccess ARN: arn:aws:iam::aws:policy/CloudFrontReadOnlyAccess Allowed Actions Actions Services acm:ListCertificates acm cloudfront:Describe* cloudfront cloudfront:Get* cloudfront cloudfront:List* cloudfront cloudfront-keyvaluestore:Describe* cloudfront-keyvaluestore cloudfront-keyvaluestore:Get* cloudfront-keyvaluestore cloudfront-keyvaluestore:List* cloudfront-keyvaluestore iam:ListServerCertificates iam route53:List* route53 waf:GetWebACL waf waf:ListWebACLs waf wafv2:GetWebACL wafv2 wafv2:ListWebACLs wafv2