{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "actiontrail:DescribeTrails",
        "actiontrail:GetTrailStatus",
        "alb:GetLoadBalancerAttribute",
        "alb:ListListeners",
        "alb:ListLoadBalancers",
        "alb:ListRules",
        "alb:ListSecurityPolicies",
        "alb:ListServerGroupServers",
        "alb:ListServerGroups",
        "cms:DescribeMonitoringAgentHosts",
        "cs:DescribeClusters",
        "cs:GetClusters",
        "ecs:DescribeDisks",
        "ecs:DescribeImages",
        "ecs:DescribeInstanceTypes",
        "ecs:DescribeInstances",
        "ecs:DescribeKeyPairs",
        "ecs:DescribeNetworkInterfaces",
        "ecs:DescribeRegions",
        "ecs:DescribeSecurityGroupAttribute",
        "ecs:DescribeSecurityGroups",
        "ecs:DescribeSnapshots",
        "ecs:DescribeZones",
        "elasticsearch:ListInstance",
        "kms:DescribeKey",
        "kms:ListKeys",
        "kms:ListResourceTags",
        "kvstore:DescribeInstanceSSL",
        "kvstore:DescribeInstances",
        "log:GetLogStore",
        "log:ListLogStores",
        "log:ListProject",
        "nlb:ListListeners",
        "nlb:ListLoadBalancers",
        "nlb:ListSecurityPolicy",
        "nlb:ListServerGroupServers",
        "nlb:ListServerGroups",
        "oss:GetBucketAcl",
        "oss:GetBucketEncryption",
        "oss:GetBucketInfo",
        "oss:GetBucketLifecycle",
        "oss:GetBucketLocation",
        "oss:GetBucketLogging",
        "oss:GetBucketPolicy",
        "oss:GetBucketStat",
        "oss:GetBucketTagging",
        "oss:GetBucketVersioning",
        "oss:GetBucketWebsite",
        "oss:ListBuckets",
        "ram:GenerateCredentialReport",
        "ram:GetAccessKeyLastUsed",
        "ram:GetCallerIdentity",
        "ram:GetCredentialReport",
        "ram:GetLoginProfile",
        "ram:GetPasswordPolicy",
        "ram:GetPolicyVersion",
        "ram:GetRole",
        "ram:GetUser",
        "ram:GetUserMFAInfo",
        "ram:ListAccessKeys",
        "ram:ListGroups",
        "ram:ListGroupsForUser",
        "ram:ListPolicies",
        "ram:ListPoliciesForGroup",
        "ram:ListPoliciesForRole",
        "ram:ListPoliciesForUser",
        "ram:ListRoles",
        "ram:ListUsers",
        "rds:DescribeBackupPolicy",
        "rds:DescribeBackups",
        "rds:DescribeDBInstanceIPArrayList",
        "rds:DescribeDBInstanceNetInfo",
        "rds:DescribeDBInstanceSSL",
        "rds:DescribeDBInstanceTDE",
        "rds:DescribeDBInstances",
        "rds:DescribeParameters",
        "rds:DescribeTags",
        "slb:DescribeAccessLogsDownloadAttribute",
        "slb:DescribeLoadBalancerListeners",
        "slb:DescribeLoadBalancers",
        "slb:DescribeMasterSlaveServerGroupAttribute",
        "slb:DescribeMasterSlaveServerGroups",
        "slb:DescribeRules",
        "slb:DescribeVServerGroupAttribute",
        "slb:DescribeVServerGroups",
        "slb:ListTLSCipherPolicies",
        "vpc:DescribeEipAddresses",
        "vpc:DescribeFlowLogs",
        "vpc:DescribeVRouters",
        "vpc:DescribeVSwitches",
        "vpc:DescribeVpcs"
      ],
      "Resource": "*",
      "Effect": "Allow"
    }
  ]
}