{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "ds:ListAuthorizedApplications",
                "ec2:GetEbsEncryptionByDefault",
                "ecr:Describe*",
                "support:Describe*",
                "tag:GetTagKeys",
                "lambda:GetFunction",
                "glue:GetConnections",
                "glue:GetSecurityConfiguration",
                "glue:SearchTables",
                "s3:GetAccountPublicAccessBlock",
                "shield:GetSubscriptionState",
                "shield:DescribeProtection"
            ],
            "Resource": "*",
            "Effect": "Allow",
            "Sid": "AllowMoreReadForProwler"
        }
    ]
}