AmazonGrafanaCloudWatchAccess
Description: This policy grants access to Amazon CloudWatch and the dependencies needed to use CloudWatch as a datasource within Amazon Managed Grafana.
AmazonGrafanaCloudWatchAccess
is an AWS managed policy.
Using this policy
You can attach AmazonGrafanaCloudWatchAccess
to your users, groups, and roles.
Policy details
-
Type: Service role policy
-
Creation time: March 24, 2023, 22:41 UTC
-
Edited time: March 24, 2023, 22:41 UTC
-
ARN:
arn:aws:iam::aws:policy/service-role/AmazonGrafanaCloudWatchAccess
Policy version
Policy version: v1 (default)
The policy's default version is the version that defines the permissions for the policy. When a user or role with the policy makes a request to access an AWS resource, AWS checks the default version of the policy to determine whether to allow the request.
JSON policy document
{ "Version" : "2012-10-17", "Statement" : [ { "Effect" : "Allow", "Action" : [ "cloudwatch:DescribeAlarmsForMetric", "cloudwatch:DescribeAlarmHistory", "cloudwatch:DescribeAlarms", "cloudwatch:ListMetrics", "cloudwatch:GetMetricStatistics", "cloudwatch:GetMetricData", "cloudwatch:GetInsightRuleReport" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : [ "logs:DescribeLogGroups", "logs:GetLogGroupFields", "logs:StartQuery", "logs:StopQuery", "logs:GetQueryResults", "logs:GetLogEvents" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : [ "ec2:DescribeTags", "ec2:DescribeInstances", "ec2:DescribeRegions" ], "Resource" : "*" }, { "Effect" : "Allow", "Action" : "tag:GetResources", "Resource" : "*" }, { "Effect" : "Allow", "Action" : [ "oam:ListSinks", "oam:ListAttachedLinks" ], "Resource" : "*" } ] }