CloudWatchReadOnlyAccess - Policy Version v12

Author: MAMIP Bot

policies/CloudWatchReadOnlyAccess

@@ -1,7 +1,7 @@
 {
     "PolicyVersion": {
-        "CreateDate": "2025-10-06T21:34:07Z", 
-        "VersionId": "v11", 
+        "CreateDate": "2025-10-08T17:34:07Z", 
+        "VersionId": "v12", 
         "Document": {
             "Version": "2012-10-17", 
             "Statement": [
@@ -12,6 +12,7 @@
                         "application-signals:Get*", 
                         "application-signals:List*", 
                         "autoscaling:Describe*", 
+                        "cloudtrail:ListChannels", 
                         "cloudwatch:BatchGet*", 
                         "cloudwatch:Describe*", 
                         "cloudwatch:GenerateQuery", 
@@ -70,6 +71,32 @@
                     "Resource": "arn:aws:iam::*:role/aws-service-role/application-signals.cloudwatch.amazonaws.com/AWSServiceRoleForCloudWatchApplicationSignals", 
                     "Effect": "Allow", 
                     "Sid": "CloudWatchReadOnlyGetRolePermissions"
+                }, 
+                {
+                    "Action": [
+                        "cloudtrail:GetChannel"
+                    ], 
+                    "Resource": "arn:aws:cloudtrail:*:*:channel/aws-service-channel/application-signals/*", 
+                    "Effect": "Allow", 
+                    "Sid": "CloudWatchCloudTrailPermissions"
+                }, 
+                {
+                    "Action": [
+                        "servicequotas:GetServiceQuota"
+                    ], 
+                    "Resource": [
+                        "arn:aws:servicequotas:*:*:s3/*", 
+                        "arn:aws:servicequotas:*:*:dynamodb/*", 
+                        "arn:aws:servicequotas:*:*:kinesis/*", 
+                        "arn:aws:servicequotas:*:*:sns/*", 
+                        "arn:aws:servicequotas:*:*:bedrock/*", 
+                        "arn:aws:servicequotas:*:*:lambda/*", 
+                        "arn:aws:servicequotas:*:*:fargate/*", 
+                        "arn:aws:servicequotas:*:*:elasticloadbalancing/*", 
+                        "arn:aws:servicequotas:*:*:ec2/*"
+                    ], 
+                    "Effect": "Allow", 
+                    "Sid": "CloudWatchServiceQuotaPermissions"
                 }
             ]
         },