FiveMetrics only needs read-only permission to be able to automaticly map all your AWS environment and create the views