Policy: ResourceGroupsandTagEditorReadOnlyAccess ARN: arn:aws:iam::aws:policy/ResourceGroupsandTagEditorReadOnlyAccess Allowed Actions Actions Services cloudformation:DescribeStacks cloudformation cloudformation:ListStackResources cloudformation cloudformation:ListStacks cloudformation resource-groups:Get* resource-groups resource-groups:List* resource-groups resource-groups:Search* resource-groups tag:getResources tag tag:getTagKeys tag tag:getTagValues tag