AWS IAM policy for metricbeat aws module metricsets

Metricbeat aws module permissions

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ec2:DescribeRegions",
                "cloudwatch:GetMetricData",
                "cloudwatch:ListMetrics",
                "tag:getResources",
                "sts:GetCallerIdentity",
                "iam:ListAccountAliases",
                "ec2:DescribeInstances",
                "rds:DescribeDBInstances",
                "sqs:ListQueues"
            ],
            "Resource": "*"
        }
    ]
}