Amazon CloudWatch (cloudwatch)

2026-09-22

83 new actions, 11 new resources, 1 new condition | 1 updated action

Additions

    Actions
  • AssumeAccessProfile
    • Description:  Grants permission to assume an access profile
    • Access:  Permissions management
    • Conditions: 

      cloudwatch:HasAccessGrant
  • CreateAccessGrant
    • Description:  Grants permission to create an access grant
    • Access:  Permissions management
    • Conditions: 

      cloudwatch:HasAccessGrant
  • CreateAccessProfile
    • Description:  Grants permission to create an access profile
    • Access:  Permissions management
    • Conditions: 

      cloudwatch:HasAccessGrant
  • CreateAlert
    • Description:  Grants permission to create an alert
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • CreateDomain
    • Description:  Grants permission to create a domain
    • Access:  Write
  • CreateDomainAccessGrantForOrganization
    • Description:  Grants permission to create a domain access grant for an organization
    • Access:  Permissions management
    • Conditions: 

      cloudwatch:HasAccessGrant
  • CreateDomainForOrganization
    • Description:  Grants permission to create a domain for an organization
    • Access:  Write
  • CreateIngestionEndpoint
    • Description:  Grants permission to create an ingestion endpoint
    • Access:  Write
  • CreateIntegration
    • Description:  Grants permission to create an integration
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • CreateOmniDashboard
    • Description:  Grants permission to create an omni dashboard
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • CreateOmniThread
    • Description:  Grants permission to create an omni thread
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • CreateOneTimeDeepLinkCode
    • Description:  Grants permission to create a one-time deep link code
    • Access:  Write
  • CreateSpace
    • Description:  Grants permission to create a space
    • Access:  Write
  • CreateView
    • Description:  Grants permission to create a view
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • DeleteAccessGrant
    • Description:  Grants permission to delete an access grant
    • Access:  Permissions management
    • Resources: 

      Name: access-grant

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • DeleteAccessProfile
    • Description:  Grants permission to delete an access profile
    • Access:  Permissions management
    • Resources: 

      Name: access-profile

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • DeleteAlert
    • Description:  Grants permission to delete an alert
    • Access:  Write
    • Resources: 

      Name: alert

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • DeleteDomain
    • Description:  Grants permission to delete a domain
    • Access:  Write
    • Resources: 

      Name: domain

      Required: Yes

  • DeleteDomainAccessGrantForOrganization
    • Description:  Grants permission to delete a domain access grant for an organization
    • Access:  Permissions management
    • Resources: 

      Name: organization-access-grant

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • DeleteDomainForOrganization
    • Description:  Grants permission to delete a domain for an organization
    • Access:  Write
    • Resources: 

      Name: organization-domain

      Required: Yes

  • DeleteIngestionEndpoint
    • Description:  Grants permission to delete an ingestion endpoint
    • Access:  Write
    • Resources: 

      Name: ingestion-endpoint

      Required: Yes

  • DeleteIntegration
    • Description:  Grants permission to delete an integration
    • Access:  Write
    • Resources: 

      Name: integration

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • DeleteOmniDashboard
    • Description:  Grants permission to delete an omni dashboard
    • Access:  Write
    • Resources: 

      Name: omni-dashboard

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • DeleteOmniThread
    • Description:  Grants permission to delete an omni thread
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • DeleteSpace
    • Description:  Grants permission to delete a space
    • Access:  Write
    • Resources: 

      Name: space

      Required: Yes

  • DeleteView
    • Description:  Grants permission to delete a view
    • Access:  Write
    • Resources: 

      Name: view

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetAccessGrant
    • Description:  Grants permission to get an access grant
    • Access:  Read
    • Resources: 

      Name: access-grant

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetAccessProfile
    • Description:  Grants permission to get an access profile
    • Access:  Read
    • Resources: 

      Name: access-profile

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetAgentGraph
    • Description:  Grants permission to get an agent graph
    • Access:  Read
  • GetAlert
    • Description:  Grants permission to get an alert
    • Access:  Read
    • Resources: 

      Name: alert

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetContextGraph
    • Description:  Grants permission to get a context graph
    • Access:  Read
    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetDomain
    • Description:  Grants permission to get a domain
    • Access:  Read
    • Resources: 

      Name: domain

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetDomainAccessGrantForOrganization
    • Description:  Grants permission to get a domain access grant for an organization
    • Access:  Read
    • Resources: 

      Name: organization-access-grant

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetDomainForOrganization
    • Description:  Grants permission to get a domain for an organization
    • Access:  Read
    • Resources: 

      Name: organization-domain

      Required: Yes

  • GetIngestionEndpoint
    • Description:  Grants permission to get an ingestion endpoint
    • Access:  Read
    • Resources: 

      Name: ingestion-endpoint

      Required: Yes

  • GetIntegration
    • Description:  Grants permission to get an integration
    • Access:  Read
    • Resources: 

      Name: integration

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetIntelligenceConfiguration
    • Description:  Grants permission to get an intelligence configuration
    • Access:  Read
    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetOmniDashboard
    • Description:  Grants permission to get an omni dashboard
    • Access:  Read
    • Resources: 

      Name: omni-dashboard

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetOmniThread
    • Description:  Grants permission to get an omni thread
    • Access:  Read
    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetPreferences
    • Description:  Grants permission to get preferences
    • Access:  Read
    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetRecords
    • Description:  Grants permission to fetch logs, metrics, and traces
    • Access:  Read
    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetSpace
    • Description:  Grants permission to get a space
    • Access:  Read
    • Resources: 

      Name: space

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetSpaceCredentials
    • Description:  Grants permission to get space credentials
    • Access:  Read
  • GetSpaceCredentialsForOrganization
    • Description:  Grants permission to get space credentials for an organization
    • Access:  Read
  • GetTelemetryQueryResults
    • Description:  Grants permission to get telemetry query results
    • Access:  Read
    • Conditions: 

      cloudwatch:HasAccessGrant
  • GetView
    • Description:  Grants permission to get a view
    • Access:  Read
    • Resources: 

      Name: view

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • InvokeIntegration
    • Description:  Grants permission to invoke an integration
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListAccessGrants
    • Description:  Grants permission to list access grants
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListAccessProfiles
    • Description:  Grants permission to list access profiles
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListAlertContributors
    • Description:  Grants permission to list alert contributors
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListAlerts
    • Description:  Grants permission to list alerts
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListDomainAccessGrantsForOrganization
    • Description:  Grants permission to list domain access grants for an organization
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListDomains
    • Description:  Grants permission to list domains
    • Access:  List
  • ListIngestionEndpoints
    • Description:  Grants permission to list ingestion endpoints
    • Access:  List
  • ListIntegrations
    • Description:  Grants permission to list integrations
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListOmniDashboards
    • Description:  Grants permission to list omni dashboards
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListOmniThreads
    • Description:  Grants permission to list omni threads
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListSpaceAccess
    • Description:  Grants permission to list access to a space
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListSpaces
    • Description:  Grants permission to list spaces
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListSpacesForOrganization
    • Description:  Grants permission to list spaces for an organization
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListTelemetryFields
    • Description:  Grants permission to list telemetry fields
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListTelemetryQuerySessions
    • Description:  Grants permission to list telemetry query sessions
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • ListViews
    • Description:  Grants permission to list views
    • Access:  List
    • Conditions: 

      cloudwatch:HasAccessGrant
  • PutIntelligenceConfiguration
    • Description:  Grants permission to configure an intelligence configuration
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • QueryTraces
    • Description:  Grants permission to query traces
    • Access:  Write
  • SearchPrincipals
    • Description:  Grants permission to search principals
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • StartOmniThreadSession
    • Description:  Grants permission to start an omni thread session
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • StartTelemetryQuery
    • Description:  Grants permission to start a telemetry query
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • StartTelemetryQuerySession
    • Description:  Grants permission to start a telemetry query session
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • StopTelemetryQuery
    • Description:  Grants permission to stop a telemetry query
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • StopTelemetryQuerySession
    • Description:  Grants permission to stop a telemetry query session
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • SubmitFeedback
    • Description:  Grants permission to submit feedback
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • UpdateAccessProfile
    • Description:  Grants permission to update an access profile
    • Access:  Permissions management
    • Resources: 

      Name: access-profile

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • UpdateAlert
    • Description:  Grants permission to update an alert
    • Access:  Write
    • Resources: 

      Name: alert

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • UpdateDomain
    • Description:  Grants permission to update a domain
    • Access:  Write
    • Resources: 

      Name: domain

      Required: Yes

  • UpdateDomainForOrganization
    • Description:  Grants permission to update a domain for an organization
    • Access:  Write
    • Resources: 

      Name: organization-domain

      Required: Yes

  • UpdateIngestionEndpoint
    • Description:  Grants permission to update an ingestion endpoint
    • Access:  Write
    • Resources: 

      Name: ingestion-endpoint

      Required: Yes

  • UpdateIntegration
    • Description:  Grants permission to update an integration
    • Access:  Write
    • Resources: 

      Name: integration

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • UpdateOmniDashboard
    • Description:  Grants permission to update an omni dashboard
    • Access:  Write
    • Resources: 

      Name: omni-dashboard

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • UpdateOmniThread
    • Description:  Grants permission to update an omni thread
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • UpdatePreferences
    • Description:  Grants permission to update preferences
    • Access:  Write
    • Conditions: 

      cloudwatch:HasAccessGrant
  • UpdateSpace
    • Description:  Grants permission to update a space
    • Access:  Write
    • Resources: 

      Name: space

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
  • UpdateView
    • Description:  Grants permission to update a view
    • Access:  Write
    • Resources: 

      Name: view

      Required: Yes

    • Conditions: 

      cloudwatch:HasAccessGrant
    Resources
  • access-grant
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:access-grant/${GrantId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • access-profile
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:access-profile/${ProfileId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • alert
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:alert/${AlertId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • domain
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:domain/${DomainId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • ingestion-endpoint
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:ingestion-endpoint/${IngestionEndpointName}/${IngestionEndpointId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • integration
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:integration/${IntegrationId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • omni-dashboard
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:omni-dashboard/${DashboardId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • organization-access-grant
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:organization-access-grant/${GrantId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • organization-domain
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:organization-domain/${DomainId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • space
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:space/${SpaceId}
    • Conditions: 

      aws:ResourceTag/${TagKey}
  • view
    • Arn:  arn:${Partition}:cloudwatch:${Region}:${Account}:view/${ViewName}
    • Conditions: 

      aws:ResourceTag/${TagKey}
    Conditions
  • cloudwatch:HasAccessGrant
    • Description:  Filters access by the presence of access grants associated with the request
    • Type:  String

Updates