{"Version": "2012-10-17", "Statement": [{"Action": ["s3:List*", "dynamodb:DescribeTable", "rds:DescribeDBInstances", "rds:DescribeDBSecurityGroups", "redshift:DescribeClusters", "redshift:DescribeClusterSecurityGroups", "sns:CreateTopic", "sns:ListTopics", "sns:Subscribe", "iam:PassRole", "iam:ListRoles", "iam:CreateRole", "iam:PutRolePolicy", "iam:GetRolePolicy", "iam:GetInstanceProfiles", "iam:ListInstanceProfiles", "iam:CreateInstanceProfile", "iam:AddRoleToInstanceProfile", "datapipeline:*", "cloudwatch:*"], "Effect": "Allow", "Resource": ["*"]}]}