readonly-policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "",
            "Effect": "Allow",
            "Action": [
                "acm:Describe*",
                "apigateway:GET",
                "batch:Describe*",
                "cloudhsm:Describe*",
                "cloudhsm:List*",
                "cloudwatch:Describe*",
                "codebuild:BatchGetProjects",
                "codecommit:BatchGetRepositories",
                "cognito-identity:Describe*",
                "cognito-idp:Describe*",
                "dax:Describe*",
                "dlm:Get*",
                "dms:Describe*",
                "ec2:Describe*",
                "eks:Describe*",
                "eks:List*",
                "elasticbeanstalk:ListTagsForResource",
                "elasticfilesystem:Describe*",
                "elasticmapreduce:Describe*",
                "es:ListTags",
                "es:DescribeReservedElasticsearchInstances",
                "fsx:Describe*",
                "glue:Get*",
                "glue:List*",
                "health:Describe*",
                "iam:GetPolicyVersion",
                "iam:GetRole",
                "iam:GetUser",
                "kafka:List*",
                "kinesis:Describe*",
                "kinesis:List*",
                "kms:Describe*",
                "kms:List*",
                "lambda:Get*",
                "lambda:List*",
                "lightsail:GetInstances",
                "lightsail:GetLoadBalancers",
                "lightsail:GetRelationalDatabases",
                "macie2:Describe*",
                "macie2:ListTagsForResources",
                "macie2:GetBucketStatistics",
                "macie2:GetMacieSession",
                "macie2:GetUsageStatistics",
                "macie2:GetUsageTotals",
                "medialive:Describe*",
                "medialive:List*",
                "mq:List*",
                "redshift:Describe*",
                "s3:GetAnalyticsConfiguration",
                "s3:GetBucket*",
                "s3:GetReplication*",
                "s3:GetStorageLensDashboard",
                "s3:GetStorageLensConfiguration",
                "s3:ListStorageLensConfigurations",
                "secretsmanager:ListSecrets",
                "shield:List*",
                "snowball:List*",
                "sns:GetTopicAttributes",
                "ssm:Describe*",
                "tag:Get*"
            ],
            "Resource": "*"
        }
    ]
}