diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc
index fb57770377ca..33205725fb7d 100644
--- a/CHANGELOG.next.asciidoc
+++ b/CHANGELOG.next.asciidoc
@@ -102,6 +102,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d
 - Change `add_cloud_metadata` processor to not overwrite `cloud` field when it already exist in the event. {pull}11612[11612] {issue}11305[11305]
 - Change diskio metrics retrieval method (only for Windows) from wmi query to DeviceIOControl function using the IOCTL_DISK_PERFORMANCE control code {pull}11635[11635]
 - Call GetMetricData api per region instead of per instance. {issue}11820[11820] {pull}11882[11882]
+- Update documentation with cloudwatch:ListMetrics permission. {pull}11987[11987]
 
 *Packetbeat*
 
diff --git a/x-pack/metricbeat/module/aws/ec2/_meta/docs.asciidoc b/x-pack/metricbeat/module/aws/ec2/_meta/docs.asciidoc
index da05069eb2b3..4490ac688e49 100644
--- a/x-pack/metricbeat/module/aws/ec2/_meta/docs.asciidoc
+++ b/x-pack/metricbeat/module/aws/ec2/_meta/docs.asciidoc
@@ -35,8 +35,9 @@ We fetch the following data:
 Some specific AWS permissions are required for IAM user to collect AWS EC2 metrics.
 ----
 ec2:DescribeInstances
-cloudwatch:GetMetricData
 ec2:DescribeRegions
+cloudwatch:GetMetricData
+cloudwatch:ListMetrics
 ----
 
 [float]
diff --git a/x-pack/metricbeat/module/aws/s3_daily_storage/_meta/docs.asciidoc b/x-pack/metricbeat/module/aws/s3_daily_storage/_meta/docs.asciidoc
index 61da19ef2100..fe3c4d5f32de 100644
--- a/x-pack/metricbeat/module/aws/s3_daily_storage/_meta/docs.asciidoc
+++ b/x-pack/metricbeat/module/aws/s3_daily_storage/_meta/docs.asciidoc
@@ -8,4 +8,5 @@ Some specific AWS permissions are required for IAM user to collect AWS s3_daily_
 ----
 ec2:DescribeRegions
 cloudwatch:GetMetricData
+cloudwatch:ListMetrics
 ----
diff --git a/x-pack/metricbeat/module/aws/s3_request/_meta/docs.asciidoc b/x-pack/metricbeat/module/aws/s3_request/_meta/docs.asciidoc
index d4b1b6da4de7..dd53f8efcd40 100644
--- a/x-pack/metricbeat/module/aws/s3_request/_meta/docs.asciidoc
+++ b/x-pack/metricbeat/module/aws/s3_request/_meta/docs.asciidoc
@@ -8,4 +8,5 @@ Some specific AWS permissions are required for IAM user to collect AWS s3_reques
 ----
 ec2:DescribeRegions
 cloudwatch:GetMetricData
+cloudwatch:ListMetrics
 ----
diff --git a/x-pack/metricbeat/module/aws/sqs/_meta/docs.asciidoc b/x-pack/metricbeat/module/aws/sqs/_meta/docs.asciidoc
index 4f138a83cc30..9b6f0374014d 100644
--- a/x-pack/metricbeat/module/aws/sqs/_meta/docs.asciidoc
+++ b/x-pack/metricbeat/module/aws/sqs/_meta/docs.asciidoc
@@ -7,6 +7,7 @@ CloudWatch metrics for Amazon SQS queues are automatically collected and pushed
 Some specific AWS permissions are required for IAM user to collect AWS SQS metrics.
 ----
 cloudwatch:GetMetricData
+cloudwatch:ListMetrics
 ec2:DescribeRegions
 sqs:ListQueues
 ----