{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "NetworkLinkEUInventorySupplement",
      "Effect": "Allow",
      "Action": [
        "directconnect:ListVirtualInterfaceRoutes",
        "route53domains:ListDomains",
        "ec2:DescribeVpcEndpointServiceConfigurations",
        "ec2:DescribeVpcEndpointConnections",
        "elasticloadbalancing:DescribeLoadBalancerAttributes",
        "elasticloadbalancing:DescribeTargetGroupAttributes",
        "ecr:DescribeImages",
        "ecr:DescribeRepositories",
        "ecr:ListTagsForResource",
        "iam:GetInstanceProfile",
        "iam:GetPolicy",
        "iam:GetPolicyVersion",
        "iam:GetRole",
        "iam:GetRolePolicy",
        "iam:ListAttachedRolePolicies",
        "iam:ListInstanceProfiles",
        "iam:ListRolePolicies",
        "iam:ListRoles",
        "kms:DescribeKey",
        "kms:ListAliases",
        "kms:ListKeys",
        "kms:ListResourceTags",
        "rds:DescribeDBClusters",
        "rds:DescribeDBInstances",
        "rds:DescribeDBSubnetGroups",
        "rds:ListTagsForResource",
        "redshift-serverless:ListNamespaces",
        "redshift-serverless:ListTagsForResource",
        "redshift-serverless:ListWorkgroups",
        "redshift:DescribeClusterSubnetGroups",
        "redshift:DescribeClusters",
        "secretsmanager:DescribeSecret",
        "secretsmanager:ListSecrets",
        "states:DescribeStateMachine",
        "states:ListStateMachines",
        "states:ListTagsForResource",
        "ses:ListEmailIdentities",
        "ses:GetEmailIdentity",
        "ses:ListConfigurationSets",
        "ses:GetConfigurationSet",
        "ses:GetConfigurationSetEventDestinations",
        "cloudwatch:DescribeAlarms",
        "cloudwatch:ListTagsForResource",
        "cloudwatch:ListDashboards",
        "cloudwatch:GetDashboard",
        "logs:DescribeLogGroups",
        "logs:ListTagsForResource",
        "logs:DescribeMetricFilters",
        "logs:DescribeSubscriptionFilters"
      ],
      "Resource": "*"
    },
    {
      "Sid": "NetworkLinkEUMessagingMigrationHsmInventory",
      "Effect": "Allow",
      "Action": [
        "mq:ListBrokers",
        "mq:DescribeBroker",
        "mq:ListConfigurations",
        "mq:DescribeConfiguration",
        "dms:DescribeReplicationInstances",
        "dms:DescribeReplicationSubnetGroups",
        "dms:DescribeEndpoints",
        "dms:DescribeReplicationTasks",
        "dms:DescribeReplicationConfigs",
        "dms:DescribeReplications",
        "dms:ListTagsForResource",
        "cloudhsm:DescribeClusters",
        "cloudhsm:ListTags"
      ],
      "Resource": "*"
    },
    {
      "Sid": "NetworkLinkEUCloudTrailHistory",
      "Effect": "Allow",
      "Action": [
        "cloudtrail:LookupEvents"
      ],
      "Resource": "*"
    }
  ]
}