# CloudWatch 可观测性管理员的条件键
<a name="condition-keys-observabilityadmin"></a>

您可以通过条件键，利用 IAM 策略来控制对 Amazon CloudWatch 可观测性管理员资源和操作的访问权限。

可观测性管理员有以下条件键：


| 条件键 | 说明 | Type | 
| --- | --- | --- | 
|  CentralizationSourceRegions  |  字符串数组  |  按请求中传递的来源区域筛选访问权限  | 
|  CentralizationDestinationRegion  |  字符串  |  按请求中传递的目标区域筛选访问权限  | 
|  CentralizationBackupRegion  |  字符串  |  按请求中传递的备份区域筛选访问权限  | 

## CentralizationSourceRegions
<a name="condition-keys-centralizationsourceregions"></a>

按为集中化规则指定的备份区域筛选访问权限
+ *可用性* – 此键适用于以下资源类型：organization-centralization-rule
+ *值类型* – 字符串

**Example 具有 observabilityadmin:CentralizationBackupRegion 的示例 JSON 策略**    
****  

```
{
  "Version":"2012-10-17",		 	 	 
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "cloudwatch:PutMetricData",
      "Resource": "*",
      "Condition": {
        "StringEquals": {
        "aws:RequestedRegion": "us-east-1"
        }
      }
    }
  ]
}
```

## CentralizationDestinationRegion
<a name="condition-keys-centralizationdestinationregion"></a>

按为集中化规则指定的目标区域筛选访问权限
+ *可用性* – 此键适用于以下资源类型：organization-centralization-rule
+ *值类型* – 字符串

**Example 具有 observabilityadmin:CentralizationDestinationRegion 的示例 JSON 策略**    
****  

```
{
  "Version":"2012-10-17",		 	 	 
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "cloudwatch:PutMetricData",
      "Resource": "*",
      "Condition": {
        "StringEquals": {
        "aws:RequestedRegion": "us-east-1"
        }
      }
    }
  ]
}
```

## CentralizationBackupRegion
<a name="condition-keys-centralizationbackupregion"></a>

按为集中化规则指定的来源区域筛选访问权限
+ *可用性* – 此键适用于以下资源类型：organization-centralization-rule
+ *类型* – 字符串值列表

**Example 具有 observabilityadmin:CentralizationSourceRegions 的示例 JSON 策略**    
****  

```
{
  "Version":"2012-10-17",		 	 	 
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "cloudwatch:PutMetricData",
      "Resource": "*",
      "Condition": {
        "StringEquals": {
        "aws:RequestedRegion": ["us-east-1", "us-east-1"]
        }
      }
    }
  ]
}
```