Policy: CloudWatchApplicationInsightsFullAccess ARN: arn:aws:iam::aws:policy/CloudWatchApplicationInsightsFullAccess Allowed Actions Actions Services apigateway:GET apigateway applicationinsights:* applicationinsights autoscaling:DescribeAutoScalingGroups autoscaling dynamodb:ListTables dynamodb ec2:DescribeInstances ec2 ec2:DescribeVolumes ec2 ecs:DescribeTaskDefinition ecs ecs:ListClusters ecs ecs:ListServices ecs ecs:ListTasks ecs eks:ListClusters eks eks:ListNodegroups eks elasticloadbalancing:DescribeLoadBalancers elasticloadbalancing elasticloadbalancing:DescribeTargetGroups elasticloadbalancing elasticloadbalancing:DescribeTargetHealth elasticloadbalancing fsx:DescribeFileSystems fsx iam:CreateServiceLinkedRole iam lambda:ListFunctions lambda logs:DescribeLogGroups logs rds:DescribeDBClusters rds rds:DescribeDBInstances rds s3:ListAllMyBuckets s3 sns:ListTopics sns sqs:ListQueues sqs states:ListStateMachines states