Policy: CloudWatchReadOnlyAccess ARN: arn:aws:iam::aws:policy/CloudWatchReadOnlyAccess Allowed Actions Actions Services application-autoscaling:DescribeScalingPolicies application-autoscaling application-signals:BatchGet* application-signals application-signals:Get* application-signals application-signals:List* application-signals autoscaling:Describe* autoscaling cloudwatch:BatchGet* cloudwatch cloudwatch:Describe* cloudwatch cloudwatch:GenerateQuery cloudwatch cloudwatch:Get* cloudwatch cloudwatch:List* cloudwatch iam:GetRole iam logs:Describe* logs logs:FilterLogEvents logs logs:Get* logs logs:List* logs logs:StartLiveTail logs logs:StartQuery logs logs:StopLiveTail logs logs:StopQuery logs logs:TestMetricFilter logs oam:ListAttachedLinks oam oam:ListSinks oam rum:BatchGet* rum rum:Get* rum rum:List* rum sns:Get* sns sns:List* sns synthetics:Describe* synthetics synthetics:Get* synthetics synthetics:List* synthetics xray:BatchGet* xray xray:CancelTraceRetrieval xray xray:Get* xray xray:List* xray xray:StartTraceRetrieval xray