"Action": [
"application-autoscaling:Describe*",
"autoscaling:Describe*",
"aws-marketplace:ViewSubscriptions",
"aws-marketplace:Subscribe",
"aws-marketplace:Unsubscribe",
"ce:Describe*",
"ce:Get*",
"ce:List*",
"billing:Get*",
"billing:List*",
"invoicing:ListInvoiceSummaries",
"payments:ListPaymentPreferences",
"account:GetAccountInformation",
"account:GetContactInformation",
"dynamodb:DescribeReservedCapacity",
"dynamodb:DescribeReservedCapacityOfferings",
"dynamodb:PurchaseReservedCapacityOfferings",
"cloudwatch:Get*",
"cloudwatch:List*",
"ec2:Describe*",
"ec2:AcceptReservedInstancesExchangeQuote",
"ec2:CancelReservedInstancesListing",
"ec2:CreateReservedInstancesListing",
"ec2:DeleteQueuedReservedInstances",
"ec2:ModifyReservedInstances",
"ec2:PurchaseHostReservation",
"ec2:PurchaseReservedInstancesOffering",
"ec2:ModifyInstanceAttribute",
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:ModifyVolume",
"elasticache:List*",
"elasticache:Describe*",
"elasticache:PurchaseReservedCacheNodesOffering",
"es:Describe*",
"es:List*",
"es:PurchaseReservedInstanceOffering",
"organizations:InviteAccountToOrganization",
"organizations:List*",
"organizations:Describe*",
"pricing:DescribeServices",
"pricing:GetAttributeValues",
"pricing:GetProducts",
"rds:Describe*",
"rds:List*",
"rds:PurchaseReservedDbInstancesOffering",
"savingsplans:Describe*",
"savingsplans:List*",
"servicequotas:Get*",
"servicequotas:List*",
"support:*"
]