Amazon CloudWatch Logs
(logs)
IAM Changes
Services
2022-11-19
2022-11-19
3 new actions, 2 new conditions | 6 updated actions, 1 updated resource
Additions
Actions
ListTagsForResource
Description:
Grants permission to list the tags for the specified resource
Access:
List
Resources:
Name: destination
Required: No
Name: log-group
Required: No
TagResource
Description:
Grants permission to add or update the specified tags for the specified resource
Access:
Tagging
Resources:
Name: destination
Required: No
Name: log-group
Required: No
Conditions:
aws:TagKeys
aws:RequestTag/${TagKey}
UntagResource
Description:
Grants permission to remove the specified tags from the specified resource
Access:
Tagging
Resources:
Name: destination
Required: No
Name: log-group
Required: No
Conditions:
aws:TagKeys
Conditions
aws:RequestTag/${TagKey}
Description:
Filters access by the tags that are passed in the request
Type:
String
aws:TagKeys
Description:
Filters access by the tag keys that are passed in the request
Type:
ArrayOfString
Updates
Actions
CreateLogGroup
Conditions
+ aws:TagKeys
+ aws:RequestTag/${TagKey}
DeleteDestination
Resources
+ destination
PutDestination
Resources
+ destination
Conditions
+ aws:TagKeys
+ aws:RequestTag/${TagKey}
PutDestinationPolicy
Resources
+ destination
TagLogGroup
Conditions
+ aws:TagKeys
+ aws:RequestTag/${TagKey}
UntagLogGroup
Conditions
+ aws:TagKeys
Resources
destination
Conditions
+ aws:ResourceTag/${TagKey}