IAM Permissions

Below is a detailed list of all the permissions that Tadpole requests. These can be modified or changed by you at any time. Keep in mind that if certain permissions are revoked, you may lose access to certain features that require those permissions to operate.

"Action": [
    "application-autoscaling:Describe*",
    "autoscaling:Describe*",
    "ce:Describe*",
    "ce:Get*",
    "ce:List*",
    "cloudwatch:GetMetricData",
    "ec2:Describe*",
    "ec2:AcceptReservedInstancesExchangeQuote",
    "ec2:CancelReservedInstancesListing",
    "ec2:CreateReservedInstancesListing",
    "ec2:DeleteQueuedReservedInstances",
    "ec2:ModifyReservedInstances",
    "ec2:PurchaseHostReservation",
    "ec2:PurchaseReservedInstancesOffering",
    "elasticache:List*",
    "elasticache:Describe*",
    "elasticache:PurchaseReservedCacheNodesOffering",
    "es:Describe*",
    "es:List*",
    "es:PurchaseReservedInstanceOffering",
    "organizations:InviteAccountToOrganization",
    "organizations:List*",
    "organizations:Describe*",
    "pricing:DescribeServices",
    "pricing:GetAttributeValues",
    "pricing:GetProducts",
    "rds:Describe*",
    "rds:List*",
    "rds:PurchaseReservedDbInstancesOffering",
    "savingsplans:Describe*",
    "savingsplans:List*",
    "servicequotas:Get*",
    "servicequotas:List*",
    "support:*"
],