Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Preferences
Contact Us
Feedback
AWS Documentation
Create an AWS Account

Managing access permissions for analytics

PDF
RSS
Focus mode
Managing access permissions for analytics - Amazon Lex

To provide a user access to analytics, attach a policy to an IAM role that permits the role to call the API operations for analytics. You can attach the AWS managed policy: AmazonLexFullAccess to the IAM role to provide full access to Amazon Lex API operations, or you can create a custom policy allowing only permissions to analytics and attach it to an IAM role.

To create a custom policy containing permissions for analytics

  1. If you need to first create an IAM role, follow the steps at Creating a role to delegate permissions to an IAM user.

  2. Follow the steps at Creating IAM policies to create a policy using the following JSON object. To enable analytics access to specific bots for the IAM role, add the ARN of each bot to the Resource field. Replace the region, account-id, and BOTID with the values corresponding to the bots. You can also replace the statement identifier, AnalyticsActions, with a name of your choice.

    {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "AnalyticsActions",
            "Effect": "Allow",
            "Action": [
                "lex:ListAggregatedUtterances",
                "lex:ListIntentMetrics",
                "lex:ListSessionAnalyticsData",
                "lex:ListIntentPaths",
                "lex:ListIntentStageMetrics",
                "lex:ListSessionMetrics"
            ],
            "Resource": [
                "arn:aws:lex:region:account-id:bot/BOTID"
            ]
        }
    ]
}

  3. Attach the policy you created to the role that you want to grant analytics permissions by following the steps at Adding and removing IAM identity permissions.

  4. The role should now have permissions to view analytics for the bots you specified.

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.