Amazon CloudWatch Application Signals MCP Server (application-signals-mcp)

Additions

Actions

• CallReadOnlyTool
  
  • Description:  Grants permission to invoke read-only Application Signals MCP tools (list_monitored_services, get_service_detail, query_service_metrics, list_service_operations, get_slo, list_slos, search_transaction_spans, query_sampled_traces, list_slis, get_enablement_guide, list_change_events, list_group_services, audit_group_health, get_group_dependencies, get_group_changes, list_grouping_attribute_definitions, audit_services, audit_slos, audit_service_operations, analyze_canary_failures)
  • Access:  Read
  • Resources: 

    Name: mcp-server

    Required: Yes

• InvokeMcp
  
  • Description:  Grants permission to connect to and interact with the Application Signals MCP server (initialize, list tools, list resources, list prompts)
  • Access:  Read
  • Resources: 

    Name: mcp-server

    Required: Yes

Resources

• mcp-server
  
  • Arn:  arn:${Partition}:application-signals-mcp:${Region}:${Account}:mcp-server/*
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by tag key-value pairs attached to the resource
  • Type:  String