AWS Managed Policies. A maze of twisty passages all alike. Explore them here. If it looks like a button, it's clickable. Always up to date.

ComputeOptimizerServiceRolePolicy details (in AWS console)

Policy Name

ComputeOptimizerServiceRolePolicy

Description

Allows ComputeOptimizer to call AWS services and collect workload details on your behalf.

ARN

arn:aws:iam::aws:policy/aws-service-role/ComputeOptimizerServiceRolePolicy

Path

/aws-service-role/

PolicyId

ANPAZKAPJZG4HPOQZNRNJ

AttachmentCount

compute-optimizer organizations cloudwatch autoscaling ec2

[
  {
    "Effect": "Allow",
    "Action": [
      "compute-optimizer:*"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "organizations:DescribeOrganization",
      "organizations:ListAccounts",
      "organizations:ListAWSServiceAccessForOrganization",
      "organizations:ListDelegatedAdministrators"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "cloudwatch:GetMetricData"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "autoscaling:DescribeAutoScalingInstances",
      "autoscaling:DescribeAutoScalingGroups"
    ],
    "Resource": [
      "*"
    ]
  },
  {
    "Effect": "Allow",
    "Action": [
      "ec2:DescribeInstances",
      "ec2:DescribeVolumes"
    ],
    "Resource": [
      "*"
    ]
  }
]