.Elastic-AWS-Integration-Module-IAM-Policy

Summary: IAM Policy for Elastic's AWS Integration Module found here - https://docs.elastic.co/integrations/aws#aws-permissions

elastic-aws-integration-iam-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    "Sid": "VisualEditor0",
    "Effect": "Allow",
    "Action": [
      "s3:GetObject",
      "sts:AssumeRole",
      "tag:GetResources",
      "ec2:DescribeInstances",
      "rds:ListTagsForResource",
      "ec2:DescribeRegions",
      "rds:DescribeDBInstances",
      "sns:ListTopics",
      "iam:ListAccountAliases",
      "sts:GetCallerIdentity",
      "sqs:ChangeMessageVisibility",
      "sqs:DeleteMessage",
      "sqs:ListOueues",
      "sqs:ReceiveMessage",
      "cloudwatch:GetMetricData",
      "cloudwatch:ListMetrics"
    ],
    "Resource": "*"
  ]
}