| logs:FilterLogEvents | ReadOnly |
| logs:GetLogEvents | ReadOnly |
| logs:DescribeAccountPolicies | Metadata |
| logs:DescribeDeliveries | Metadata |
| logs:DescribeDeliveryDestinations | Metadata |
| logs:DescribeDeliverySources | Metadata |
| logs:DescribeDestinations | Metadata |
| logs:DescribeExportTasks | Metadata |
| logs:DescribeLogGroups | Metadata |
| logs:DescribeLogStreams | Metadata |
| logs:DescribeMetricFilters | Metadata |
| logs:DescribeQueries | Metadata |
| logs:DescribeQueryDefinitions | Metadata |
| logs:DescribeResourcePolicies | Metadata |
| logs:DescribeSubscriptionFilters | Metadata |
| logs:GetDataProtectionPolicy | Metadata |
| logs:GetDelivery | Metadata |
| logs:GetDeliveryDestination | Metadata |
| logs:GetDeliveryDestinationPolicy | Metadata |
| logs:GetDeliverySource | Metadata |
| logs:GetLogAnomalyDetector | Metadata |
| logs:GetLogGroupFields | Metadata |
| logs:GetLogRecord | Metadata |
| logs:GetQueryResults | Metadata |
| logs:Link | Metadata |
| logs:ListAnomalies | Metadata |
| logs:ListLogAnomalyDetectors | Metadata |
| logs:ListTagsForResource | Metadata |
| logs:ListTagsLogGroup | Metadata |
