cloudfox-policy.json

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "apigateway:GET",                
                "apprunner:DescribeService",
                "apprunner:ListServices",
                "cloudformation:DescribeStacks",
                "cloudformation:GetTemplate",
                "cloudformation:ListStacks",
                "cloudtrail:LookupEvents",
                "cloudfront:ListDistributions",
                "codebuild:ListProjects",
                "codebuild:BatchGetProjects",
                "codebuild:GetResourcePolicy",
                "dynamodb:ListTables",
                "ec2:DescribeInstanceAttribute",
                "ec2:DescribeInstances",
                "ec2:DescribeNetworkInterfaces",
                "ec2:DescribeRegions",
                "ecr:DescribeImages",
                "ecr:DescribeRepositories",
                "ecs:DescribeTaskDefinition",
                "ecs:ListClusters",                
                "ecs:ListTaskDefinitions",
                "ecs:ListTasks",                
                "eks:DescribeCluster",
                "eks:DescribeNodegroup",
                "eks:ListClusters",
                "eks:ListNodegroups",
                "elasticache:DescribeCacheClusters",
                "elasticache:DescribeCacheSubnetGroups",
                "elasticache:DescribeReplicationGroups",
                "elasticfilesystem:DescribeFileSystemPolicy",
                "elasticfilesystem:DescribeFileSystems",
                "elasticfilesystem:DescribeMountTargets",
                "eks:DescribeCluster",
                "eks:ListClusters",
                "elasticloadbalancing:DescribeLoadBalancers",
                "elasticloadbalancing:DescribeListeners",                            
                "fsx:DescribeFileSystems",
                "fsx:DescribeVolumes",
                "glue:ListDevEndpoints",
                "glue:ListJobs",
                "grafana:ListWorkspaces",
                "iam:GetAccountAuthorizationDetails",
                "iam:ListAccessKeys",
                "iam:ListUsers",
                "iam:ListRoles",
                "iam:SimulatePrincipalPolicy",
                "lambda:GetFunctionUrlConfig",
                "lambda:ListFunctions",
                "lambda:GetPolicy",                
                "lightsail:GetContainerServices",
                "lightsail:GetInstances",
                "mq:DescribeBroker",
                "mq:ListBrokers",
                "organizations:ListAccounts",
                "es:DescribeDomain",
                "es:ListDomainNames",
                "ram:GetResourceShares",
                "ram:ListResources",
                "rds:DescribeDBInstances",
                "redshift:DescribeClusters",
                "route53:ListHostedZones",
                "route53:ListResourceRecordSets",
                "s3:GetBucketPolicyStatus",
                "s3:GetBucketWebsite",
                "s3:ListAllMyBuckets",
                "s3:GetAccountPublicAccessBlock", 
                "s3:GetBucketLocation",
                "s3:GetBucketPolicy",
                "ssm:DescribeParameters",
                "sagemaker:ListProcessingJobs",
                "sagemaker:DescribeProcessingJob",
                "sagemaker:ListTransformJobs",
                "sagemaker:DescribeTransformJob",
                "sagemaker:ListTrainingJobs",
                "sagemaker:DescribeTrainingJob",
                "sagemaker:ListModels",
                "sagemaker:DescribeModel",                
                "secretsmanager:ListSecrets",
                "sns:ListTopics",
                "sns:GetTopicAttributes",
                "sqs:ListQueues",
                "sqs:GetQueueAttributes",
                "tag:GetResources"

            ],
            "Resource": "*",
            "Effect": "Allow",
            "Sid": "AllowMoreReadForCloudFox190"
        }
    ]
}