cloudtrail:LookupEvents is a Read access-level action in the cloudtrail service. Grants permission to look up and retrieve metric data for API activity events captured by CloudTrail that create, update, or delete resources in your account
This action does not support resource-level permissions; use "Resource": "*" in your policy.
No condition keys are documented for this action.
A minimal policy that allows cloudtrail:LookupEvents. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCloudtrailLookupEvents",
"Effect": "Allow",
"Action": "cloudtrail:LookupEvents",
"Resource": "*"
}
]
}