在CloudWatch上工作所需的最小权限集

I've created an IAM user and intend to assign only CloudWatch access to this user. The user should be able to view and create new alarms for our ec2 instances. What is the minimum set of permissions needed for this user? Do I have to assign CloudWatchFullAccess policy?I've created an IAM user and intend to assign o