Amazon CloudWatch Observability Admin Service (observabilityadmin)

Additions

Actions

• CreateCentralizationRuleForOrganization
  
  • Description:  Grants permission to create a new organization centralization rule with the specified name for the organization
  • Access:  Write
  • Resources: 

    Name: organization-centralization-rule

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

    observabilityadmin:CentralizationSourceRegions

    observabilityadmin:CentralizationDestinationRegion

    observabilityadmin:CentralizationBackupRegion

• DeleteCentralizationRuleForOrganization
  
  • Description:  Grants permission to delete an organization centralization rule with the specified name for the organization
  • Access:  Write
  • Resources: 

    Name: organization-centralization-rule

    Required: Yes

• GetCentralizationRuleForOrganization
  
  • Description:  Grants permission to retrieve the specified organization centralization rule for the organization
  • Access:  Read
• GetTelemetryEnrichmentStatus
  
  • Description:  Grants permission to retrieve the status of the Resource tags for telemetry feature for the account
  • Access:  Read
• ListCentralizationRulesForOrganization
  
  • Description:  Grants permission to list the centralization rules for the organization
  • Access:  List
• StartTelemetryEnrichment
  
  • Description:  Grants permission to enable the Resource tags for telemetry feature for the account
  • Access:  Write
• StopTelemetryEnrichment
  
  • Description:  Grants permission to disable the Resource tags for telemetry feature for the account
  • Access:  Write
• UpdateCentralizationRuleForOrganization
  
  • Description:  Grants permission to update the specified centralization rule for the organization
  • Access:  Write
  • Resources: 

    Name: organization-centralization-rule

    Required: Yes

  • Conditions: 

    observabilityadmin:CentralizationSourceRegions

    observabilityadmin:CentralizationDestinationRegion

    observabilityadmin:CentralizationBackupRegion

Resources

• organization-centralization-rule
  
  • Arn:  arn:${Partition}:observabilityadmin:${Region}:${Account}:organization-centralization-rule:${CentralizationRuleName}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• observabilityadmin:CentralizationBackupRegion
  
  • Description:  Filters access by the backup region that is passed in the request
  • Type:  String
• observabilityadmin:CentralizationDestinationRegion
  
  • Description:  Filters access by the destination region that is passed in the request
  • Type:  String
• observabilityadmin:CentralizationSourceRegions
  
  • Description:  Filters access by the source regions that are passed in the request
  • Type:  ArrayOfString

Updates

Actions

• StopTelemetryEvaluation
  
  Resources
  
  • ＋ organization-centralization-rule