Access to Amazon Managed Grafana actions and data requires credentials. Those credentials must have permissions to perform the actions and to access the AWS resources, such as retrieving Amazon Managed Grafana data about your cloud resources. The following sections provide details about how you can use AWS Identity and Access Management and Amazon Managed Grafana to help secure your resources, by controlling who can access them. For more information, see Policies and permissions in IAM.
Amazon Managed Grafana permissions
The following table displays possible Amazon Managed Grafana actions and their required permissions:
| Action | Required permission |
|---|---|
|
Create an Amazon Managed Grafana workspace. A workspace is a logically isolated Grafana server used to create and visualize metrics, logs, and traces. |
|
|
Delete an Amazon Managed Grafana workspace. |
|
|
Retrieve detailed information about an Amazon Managed Grafana workspace. |
|
|
Retrieve the authentication configuration associated with a workspace. |
|
|
Retrieve a list of permissions associated with workspace users and groups. |
|
|
Retrieve a list of the Amazon Managed Grafana workspaces that exist in the account. |
|
|
Update the permissions associated with workspace users and groups. |
|
|
Update Amazon Managed Grafana workspaces. |
|
|
Update the authentication configuration associated with a workspace. |
|
|
Associate a Grafana enterprise license with a workspace. |
|
