AWSCloudTrailReadOnlyAccess.json

{
  "Arn": "arn:aws:iam::aws:policy/AWSCloudTrailReadOnlyAccess",
  "CreateDate": "2015-02-06T18:39:59Z",
  "DefaultVersionId": "v9",
  "IsAttachable": true,
  "Path": "/",
  "PolicyId": "ANPAJDU7KJADWBSEQ3E7S",
  "PolicyName": "AWSCloudTrailReadOnlyAccess",
  "PolicyVersion": {
    "CreateDate": "2019-11-20T21:06:49Z",
    "Document": {
      "Statement": [
        {
          "Action": [
            "cloudtrail:DescribeTrails",
            "cloudtrail:GetEventSelectors",
            "cloudtrail:GetInsightSelectors",
            "cloudtrail:GetTrail",
            "cloudtrail:GetTrailStatus",
            "cloudtrail:ListPublicKeys",
            "cloudtrail:ListTags",
            "cloudtrail:ListTrails",
            "cloudtrail:LookupEvents",
            "kms:ListAliases",
            "lambda:ListFunctions",
            "s3:ListAllMyBuckets"
          ],
          "Effect": "Allow",
          "Resource": "*"
        },
        {
          "Action": [
            "s3:GetBucketLocation",
            "s3:GetObject"
          ],
          "Effect": "Allow",
          "Resource": "*"
        }
      ],
      "Version": "2012-10-17"
    },
    "IsDefaultVersion": true,
    "VersionId": "v9"
  },
  "UpdateDate": "2019-11-20T21:06:49Z"
}