AWS IAM - Read Only Access Policy for SWF Domain

I'd like to grant a group read-only access to an entire SWF domain. The users in this group will be able to see all workflow instances and the events / activities history of each workflow. They will not be able to create workflows, activities, or start workflows.

Can someone post an example of what the policy document JSON for this would look like?