Policy: CloudWatchSyntheticsFullAccess ARN: arn:aws:iam::aws:policy/CloudWatchSyntheticsFullAccess Allowed Actions Actions Services apigateway:GET apigateway cloudwatch:DeleteAlarms cloudwatch cloudwatch:DescribeAlarms cloudwatch cloudwatch:GetMetricData cloudwatch cloudwatch:GetMetricStatistics cloudwatch cloudwatch:PutMetricAlarm cloudwatch ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 iam:GetRole iam iam:ListAttachedRolePolicies iam iam:ListRoles iam iam:PassRole iam kms:Decrypt kms kms:DescribeKey kms kms:ListAliases kms lambda:AddPermission lambda lambda:CreateFunction lambda lambda:DeleteFunction lambda lambda:DeleteLayerVersion lambda lambda:GetFunction lambda lambda:GetFunctionConfiguration lambda lambda:GetLayerVersion lambda lambda:ListTags lambda lambda:PublishLayerVersion lambda lambda:PublishVersion lambda lambda:TagResource lambda lambda:UntagResource lambda lambda:UpdateFunctionCode lambda lambda:UpdateFunctionConfiguration lambda logs:DescribeLogStreams logs logs:FilterLogEvents logs logs:GetLogEvents logs logs:GetLogGroupFields logs logs:GetLogRecord logs logs:StartQuery logs s3:CreateBucket s3 s3:GetBucketLocation s3 s3:GetObject s3 s3:GetObjectVersion s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 s3:PutEncryptionConfiguration s3 sns:CreateTopic sns sns:ListSubscriptionsByTopic sns sns:ListTopics sns sns:Subscribe sns synthetics:* synthetics xray:BatchGetTraces xray xray:GetTraceSummaries xray