For independent probes
EC2 Details
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "ec2:DescribeInstances", "ec2:DescribeAddresses", "ec2:DescribeTags", "ec2:DescribeRegions", "ec2:DescribeSnapshots", "ec2:DescribeHosts", "ec2:DescribeImages", "ec2:DescribeNetworkInterfaces", "organizations:DescribeOrganization", "ec2:DescribeAvailabilityZones", "ec2:DescribeVpcs", "ec2:DescribeVolumes", "ec2:DescribeAccountAttributes", "iam:ListAccountAliases", "iam:GetUser", "ec2:DescribeSubnets", "iam:GetAccountAuthorizationDetails" ], "Resource": "*" } ] }S3 Details
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetObject", "organizations:DescribeOrganization", "s3:ListAllMyBuckets", "iam:ListAccountAliases", "s3:ListBucket", "iam:GetUser", "iam:GetAccountAuthorizationDetails" ], "Resource": "*" } ] }Storage Usage
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "iam:ListAccountAliases", "iam:GetUser", "iam:GetAccountAuthorizationDetails", "organizations:DescribeOrganization", "s3:GetLifecycleConfiguration", "s3:GetBucketTagging", "s3:GetBucketLogging", "s3:ListBucketVersions", "s3:ListBucket", "s3:GetBucketVersioning", "s3:GetBucketPolicy", "s3:GetReplicationConfiguration", "s3:ListAllMyBuckets", "s3:GetBucketLocation", "s3:GetObjectAcl", "s3:GetObject", "elasticfilesystem:DescribeFileSystems", "elasticfilesystem:DescribeMountTargets", "elasticfilesystem:DescribeTags", "glacier:ListVaults" ], "Resource": "*" } ] }Billing Records
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "s3:GetObject", "organizations:DescribeOrganization", "s3:ListAllMyBuckets", "iam:ListAccountAliases", "s3:ListBucket", "iam:GetUser", "iam:GetAccountAuthorizationDetails" ], "Resource": "*" } ] }