CloudWatch DataSource Permissions

I configured Grafana with full access to cloudwatch using access/secret keys. I don’t want to give full power to IAM user , but while giving only cloudwatch read permissions , grafana is not working.
what are the minimum permissions required for IAM user to see all metrics on GRAFANA?