Read Only Ylastic User - IAM Policy

A policy that lets the Ylastic user view resources and navigate all pages within Ylastic, but does not allow any modifications. It will also not permit normal execution of any scheduled tasks or backups. User cannot integrate Cloudwatch, Create/use AWS Backup, CloudTrail and Config with Ylastic. You can attach a scheduling task specific policy in addition to this policy to enable the user to run specific tasks.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "acm:List*",
        "autoscaling:Describe*",
        "backup:Describe*",
        "backup:Get*",
        "backup:List*",
        "ce:Get*",
        "cloudtrail:Describe*",
        "cloudtrail:Get*",
        "cloudtrail:LookupEvents",
        "cloudtrail:List*",
        "cloudwatch:Describe*",
        "cloudwatch:Get*",
        "cloudwatch:List*",
        "codedeploy:Get*",
        "codedeploy:List*",
        "config:Describe*",
        "config:Get*",
        "config:List*",
        "dynamodb:BatchGetItem",
        "dynamodb:Describe*",
        "dynamodb:Get*",
        "dynamodb:List*",
        "dynamodb:Query",
        "dynamodb:Scan",
        "ec2:Describe*",
        "ec2:Get*",
        "ecs:Describe*",
        "ecs:Get*",
        "ecs:List*",
        "ecr:Describe*",
        "ecr:Get*",
        "ecr:List*",
        "elasticloadbalancing:Describe*",
        "events:Describe*",
        "events:List*",
        "events:Test*",
        "health:Describe*",
        "health:Get*",
        "health:List*",
        "iam:Get*",
        "iam:List*",
        "kms:Describe*",
        "kms:Get*",
        "kms:List*",
        "lambda:List*",
        "lambda:Get*",
        "logs:Describe*",
        "logs:Get*",
        "logs:FilterLogEvents",
        "logs:TestMetricFilter",
        "organizations:List*",
        "organizations:Describe*",
        "rds:Describe*",
        "rds:List*",
        "route53:Get*",
        "route53:List*",
        "s3:Get*",
        "s3:List*",
        "sns:Get*",
        "sns:List*",
        "sqs:Get*",
        "sqs:List*",
        "sqs:Receive*",
        "support:Describe*",
        "tag:Get*"
      ],
      "Effect": "Allow",
      "Resource": "*"
    }
  ]
}