main
cloudwatch:AlarmActions cloudwatch:RequestTag/${TagKey} cloudwatch:ResourceTag/${TagKey} cloudwatch:TagKeys cloudwatch:namespace cloudwatch:requestInsightRuleLogGroups cloudwatch:requestManagedResourceARNs