---
title: AWS IAM Policy
slug: discovery-app-req-guide/aws-iam-policy
createdAt: 2026-11-05T06:06:11.650Z
---

To allow the importing of AWS objects into the CMDB the following must be done within the AWS account.

Note: EC2 operating system discovery is performed via the Discovery App per the Windows/Linux/Unix methods listed in the Authentication Requirements Table above.

\{

    "Version": "2012-10-17",

    "Statement": \[

        \{

            "Sid": "VisualEditor0",

            "Effect": "Allow",

            "Action": \[

                "ecr\:Describe\*",

                "ec2\:Describe\*",

                "rds\:Describe\*",

                "elasticloadbalancing\:Describe\*",

                "autoscaling\:Describe\*",

                "iam\:GetUser",

                "dynamodb\:Describe\*",

                "s3\:ListAllMyBuckets"

            ],

            "Resource": "\*"

        }

    ]

}