resource-discovery-policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": [
                "acm:Describe*",
                "application-autoscaling:Describe*",
                "apigateway:GET",
                "appsync:List*",
                "appsync:Get*",
                "backup:GetBackup*",
                "batch:Describe*",
                "cloudhsm:Describe*",
                "cloudhsm:List*",
                "cloudwatch:Describe*",
                "codebuild:BatchGetProjects",
                "codecommit:BatchGetRepositories",
                "cognito-identity:Describe*",
                "cognito-idp:Describe*",
                "dax:Describe*",
                "dlm:Get*",
                "dms:Describe*",
                "ec2:Describe*",
                "eks:Describe*",
                "eks:List*",
                "elasticbeanstalk:ListTagsForResource",
                "elasticfilesystem:Describe*",
                "elasticmapreduce:Describe*",
                "es:Describe*",
                "es:Get*",
                "es:List*",
                "fsx:Describe*",
                "glue:Get*",
                "glue:List*",
                "health:Describe*",
                "iam:GetPolicyVersion",
                "iam:GetRole",
                "iam:GetUser",
                "kafka:Describe*",
                "kafka:Get*",
                "kafka:List*",
                "kinesis:Describe*",
                "kinesis:List*",
                "kms:Describe*",
                "kms:List*",
                "lambda:Get*",
                "lambda:List*",
                "lightsail:GetInstances",
                "lightsail:GetLoadBalancers",
                "lightsail:GetRelationalDatabases",
                "macie2:Describe*",
                "macie2:List*",
                "macie2:Get*",
                "medialive:Describe*",
                "medialive:List*",
                "mq:List*",
                "pricing:List*",
                "pricing:Get*",
                "pricing:Describe*",
                "redshift:Describe*",
                "rds:ListTags*",
                "s3:GetAnalyticsConfiguration",
                "s3:GetBucket*",
                "s3:GetIntelligentTieringConfiguration",
                "s3:GetLifecycleConfiguration",
                "s3:GetReplication*",
                "s3:GetStorageLensDashboard",
                "s3:GetStorageLensConfiguration",
                "s3:ListStorageLensConfigurations",
                "secretsmanager:ListSecrets",
                "servicequotas:List*",
                "servicequotas:Get*",
                "shield:List*",
                "snowball:List*",
                "sns:GetTopicAttributes",
                "ssm:Describe*",
                "tag:Get*",
                "vpc-lattice:List*",
                "vpc-lattice:Get*"
            ],
            "Resource": "*"
        }
    ]
}