Amazon CloudWatch Application Signals (application-signals)

Additions

Actions

• BatchGetServiceLevelObjectiveBudgetReport
  
  • Description:  Grants permission to batch retrieve a service level objective budget report
  • Access:  Read
  • Resources: 

    Name: slo

    Required: Yes

• CreateServiceLevelObjective
  
  • Description:  Grants permission to create a service level objective
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteServiceLevelObjective
  
  • Description:  Grants permission to delete a service level objective
  • Access:  Write
  • Resources: 

    Name: slo

    Required: Yes

• GetService
  
  • Description:  Grants permission to retrieve information about a service
  • Access:  Read
• GetServiceLevelObjective
  
  • Description:  Grants permission to retrieve information about service level objective
  • Access:  Read
  • Resources: 

    Name: slo

    Required: Yes

• ListServiceDependencies
  
  • Description:  Grants permission to list service dependencies
  • Access:  Read
• ListServiceDependents
  
  • Description:  Grants permission to list service dependents
  • Access:  Read
• ListServiceLevelObjectives
  
  • Description:  Grants permission to list service level objectives
  • Access:  List
• ListServiceOperations
  
  • Description:  Grants permission to list service operations
  • Access:  Read
• ListServices
  
  • Description:  Grants permission to list services
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list tags for an Amazon CloudWatch SLO
  • Access:  Read
  • Resources: 

    Name: slo

    Required: Yes

• StartDiscovery
  
  • Description:  Grants permission to enable CloudWatch discovery
  • Access:  Write
• TagResource
  
  • Description:  Grants permission to add tags to an Amazon CloudWatch SLO
  • Access:  Tagging
  • Resources: 

    Name: slo

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UntagResource
  
  • Description:  Grants permission to untag to an Amazon CloudWatch SLO
  • Access:  Tagging
  • Resources: 

    Name: slo

    Required: Yes

  • Conditions: 

    aws:TagKeys

• UpdateServiceLevelObjective
  
  • Description:  Grants permission to update a service level objective
  • Access:  Write
  • Resources: 

    Name: slo

    Required: Yes

Resources

• slo
  
  • Arn:  arn:${Partition}:application-signals:${Region}:${Account}:slo/${SloName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the allowed set of values for each of the tags
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by tag-value associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the presence of mandatory tags in the request
  • Type:  ArrayOfString