When you set up IAM users and groups, you can stipulate which permissions the account has for API calls. The keys you use when you set up the adapter instance must have certain permissions enabled.

Table 1. IAM Permissions
Service Required Permissions
Cloudwatch Yes.

listMetrics

describeAlarms

getMetricStatistics

EC2 describeRegions is required. describeInstances and describeVolumes are only required if you subscribe to the EC2 service.

describeInstances

describeVolumes

describeRegions

ASG Required if subscribing to the ASG service. describeAutoScalingGroups
ELB Required if subscribing to the ELB service. describeLoadBalancers
EMR Required if subscribing to the EMR service. describeJobFlows
RDS Required if subscribing to RDS service. DescribeDBInstances
ElasticCache Required if subscribing to ElasticCache service. DescribeCacheClusters
SQS Required if subscribing to SQS service. ListQueues
Elastic MapReduce listClusters
Classic Load Balancer describeLoadBalancers

describeTags

Application Load Balancer describeLoadBalancers

describeTags

Network Load Balancer describeLoadBalancers

describeTags

Auto Scaling Group describeAutoScalingGroups
Elastic Compute Cloud describeInstances

describeVolumes

describeVpcs

describeAddresses

describeRegions

Elastic Block Store describeVolumes
Amazon Relational Database RDS Service describeDBInstances

listTagsForResource

ElastiCache describeCacheClusters

listTagsForResource

Simple Queue Service listQueues

listQueueTags

Elastic Container Registry describeRepositories

describeImages

Elastic Container Service listClusters

listServices

Lambda listFunctions

listTags

DynamoDB listTables

describeTable

listTagsOfResource

DAX describeClusters

listTags

Redshift describeClusters
Virtual Private Cloud describeVpcs
Cloud Front Distribution listDistributions

listStreamingDistributions

listTagsForResource

Direct Connect describeConnections
VPN Connection describeVpnConnections
VPC NAT Gateway describeNatGateways
Elastic IP describeAddresses
CloudformationStack describeStacks

describeStackResources

S3 listBuckets

getBucketTaggingConfiguration

Workspaces describeWorkspaces

describeTags

Hosted Zone listHostedZones

listTagsForResource

Health Checks listHealthChecks

listTagsForResource