{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "actiontrail:DescribeTrails",
        "actiontrail:GetTrailStatus",
        "cms:DescribeMonitoringAgentHosts",
        "cs:DescribeClusters",
        "cs:GetClusters",
        "ecs:DescribeDisks",
        "ecs:DescribeImages",
        "ecs:DescribeInstanceTypes",
        "ecs:DescribeInstances",
        "ecs:DescribeKeyPairs",
        "ecs:DescribeNetworkInterfaces",
        "ecs:DescribeRegions",
        "ecs:DescribeSecurityGroupAttribute",
        "ecs:DescribeSecurityGroups",
        "ecs:DescribeSnapshots",
        "ecs:DescribeZones",
        "elasticsearch:ListInstance",
        "kms:DescribeKey",
        "kms:ListKeys",
        "kms:ListResourceTags",
        "kvstore:DescribeInstanceSSL",
        "kvstore:DescribeInstances",
        "oss:GetBucketAcl",
        "oss:GetBucketEncryption",
        "oss:GetBucketInfo",
        "oss:GetBucketLifecycle",
        "oss:GetBucketLocation",
        "oss:GetBucketLogging",
        "oss:GetBucketPolicy",
        "oss:GetBucketStat",
        "oss:GetBucketTagging",
        "oss:GetBucketVersioning",
        "oss:GetBucketWebsite",
        "oss:ListBuckets",
        "ram:GenerateCredentialReport",
        "ram:GetAccessKeyLastUsed",
        "ram:GetCallerIdentity",
        "ram:GetCredentialReport",
        "ram:GetLoginProfile",
        "ram:GetPasswordPolicy",
        "ram:GetPolicyVersion",
        "ram:GetRole",
        "ram:GetUser",
        "ram:GetUserMFAInfo",
        "ram:ListAccessKeys",
        "ram:ListGroups",
        "ram:ListGroupsForUser",
        "ram:ListPolicies",
        "ram:ListPoliciesForGroup",
        "ram:ListPoliciesForRole",
        "ram:ListPoliciesForUser",
        "ram:ListRoles",
        "ram:ListUsers",
        "rds:DescribeBackupPolicy",
        "rds:DescribeBackups",
        "rds:DescribeDBInstanceIPArrayList",
        "rds:DescribeDBInstanceNetInfo",
        "rds:DescribeDBInstanceSSL",
        "rds:DescribeDBInstanceTDE",
        "rds:DescribeDBInstances",
        "rds:DescribeParameters",
        "rds:DescribeTags",
        "vpc:DescribeEipAddresses",
        "vpc:DescribeFlowLogs",
        "vpc:DescribeVRouters",
        "vpc:DescribeVSwitches",
        "vpc:DescribeVpcs"
      ],
      "Resource": "*",
      "Effect": "Allow"
    }
  ]
}