17. If cloudwatch:DescribeAlarms permission does not exists, click Attach policies > Create policy and in the JSON editor paste the following after updating with your AWS account ID:1{ 2 "Action": [ 3 "cloudwatch:DescribeAlarms" 4 ], 5 "Resource": "arn:aws:cloudwatch:*:[ACCOUNT_ID]:alarm:*", 6 "Effect": "Allow" 7}