Amazon CloudWatch (cloudwatch)

2023-12-02

14 new actions, 2 new resources | 3 updated actions

Additions

    Actions
  • BatchGetServiceLevelIndicatorReport
    • Description:  Grants permission to batch get service level indicator report
    • Access:  Read
  • BatchGetServiceLevelObjectiveBudgetReport
    • Description:  Grants permission to batch retrieve a service level objective budget report
    • Access:  Read
    • Resources: 

      Name: slo

      Required: Yes

  • CreateServiceLevelObjective
    • Description:  Grants permission to create a service level objective
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys
  • DeleteServiceLevelObjective
    • Description:  Grants permission to delete a service level objective
    • Access:  Write
    • Resources: 

      Name: slo

      Required: Yes

  • EnableTopologyDiscovery
    • Description:  Grants permission to enable a CloudWatch topology discovery
    • Access:  Write
  • GenerateQuery
    • Description:  Grants permission to generate a Metrics Insights or Logs Insights query string from a natural language prompt
    • Access:  Read
  • GetService
    • Description:  Grants permission to retrieve information about a service
    • Access:  Read
    • Resources: 

      Name: service

      Required: Yes

  • GetServiceData
    • Description:  Grants permission to retrieve service data
    • Access:  Read
    • Resources: 

      Name: service

      Required: Yes

  • GetServiceLevelObjective
    • Description:  Grants permission to retrieve information about service level objective
    • Access:  Read
    • Resources: 

      Name: slo

      Required: Yes

  • GetTopologyDiscoveryStatus
    • Description:  Grants permission to retrieve a CloudWatch topology discovery status
    • Access:  Read
  • GetTopologyMap
    • Description:  Grants permission to retrieve a CloudWatch topology map
    • Access:  Read
  • ListServiceLevelObjectives
    • Description:  Grants permission to list service level objectives
    • Access:  List
  • ListServices
    • Description:  Grants permission to list services
    • Access:  List
  • UpdateServiceLevelObjective
    • Description:  Grants permission to update a service level objective
    • Access:  Write
    • Resources: 

      Name: slo

      Required: Yes

    Resources
  • slo
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:slo/${SloName}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • service
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:service/${ServiceName}-${UniqueAttributesHex}
    • Conditions: 

      aws:ResourceTag/${TagKey}

Updates