cloudwatch:*157 IAM actions for cloudwatch:*
157 actions available. Filter by access level or search by name.
| Action | Access Level |
|---|---|
cloudwatch:AssumeAccessProfile | Read |
cloudwatch:BatchGetServiceLevelIndicatorReport | Read |
cloudwatch:BatchGetServiceLevelObjectiveBudgetReport | Read |
cloudwatch:CallWithBearerToken | Read |
cloudwatch:CreateAccessGrant | Permissions |
cloudwatch:CreateAccessProfile | Write |
cloudwatch:CreateAlert | Write |
cloudwatch:CreateDomain | Write |
cloudwatch:CreateDomainAccessGrantForOrganization | Permissions |
cloudwatch:CreateDomainForOrganization | Write |
cloudwatch:CreateIngestionEndpoint | Write |
cloudwatch:CreateIntegration | Write |
cloudwatch:CreateOmniDashboard | Write |
cloudwatch:CreateOmniThread | Write |
cloudwatch:CreateOneTimeDeepLinkCode | Write |
cloudwatch:CreateResourceMetricsConfiguration | Write |
cloudwatch:CreateServiceLevelObjective | Write |
cloudwatch:CreateSpace | Write |
cloudwatch:CreateView | Write |
cloudwatch:DeleteAccessGrant | Permissions |
cloudwatch:DeleteAccessProfile | Write |
cloudwatch:DeleteAlarmMuteRule | Write |
cloudwatch:DeleteAlarms | Write |
cloudwatch:DeleteAlert | Write |
cloudwatch:DeleteAnomalyDetector | Write |
cloudwatch:DeleteDashboards | Write |
cloudwatch:DeleteDomain | Write |
cloudwatch:DeleteDomainAccessGrantForOrganization | Permissions |
cloudwatch:DeleteDomainForOrganization | Write |
cloudwatch:DeleteIngestionEndpoint | Write |
cloudwatch:DeleteInsightRules | Write |
cloudwatch:DeleteIntegration | Write |
cloudwatch:DeleteMetricStream | Write |
cloudwatch:DeleteOmniDashboard | Write |
cloudwatch:DeleteOmniThread | Write |
cloudwatch:DeletePipelineRule | Write |
cloudwatch:DeleteResourceMetricsConfiguration | Write |
cloudwatch:DeleteServiceLevelObjective | Write |
cloudwatch:DeleteSpace | Write |
cloudwatch:DeleteView | Write |
cloudwatch:DescribeAlarmHistory | Read |
cloudwatch:DescribeAlarms | Read |
cloudwatch:DescribeAlarmsForMetric | Read |
cloudwatch:DescribeAnomalyDetectors | Read |
cloudwatch:DescribeInsightRules | Read |
cloudwatch:DisableAlarmActions | Write |
cloudwatch:DisableInsightRules | Write |
cloudwatch:EnableAlarmActions | Write |
cloudwatch:EnableInsightRules | Write |
cloudwatch:EnableTopologyDiscovery | Write |
cloudwatch:GenerateQuery | Read |
cloudwatch:GenerateQueryResultsSummary | Read |
cloudwatch:GetAccessGrant | Permissions |
cloudwatch:GetAccessProfile | Read |
cloudwatch:GetAgentGraph | Tagging |
cloudwatch:GetAlarmMuteRule | Read |
cloudwatch:GetAlert | Read |
cloudwatch:GetContextGraph | Read |
cloudwatch:GetDashboard | Read |
cloudwatch:GetDataset | Read |
cloudwatch:GetDomain | Read |
cloudwatch:GetDomainAccessGrantForOrganization | Permissions |
cloudwatch:GetDomainForOrganization | Read |
cloudwatch:GetIngestionEndpoint | Read |
cloudwatch:GetInsightRuleReport | Read |
cloudwatch:GetIntegration | Read |
cloudwatch:GetIntelligenceConfiguration | Read |
cloudwatch:GetMetricData | Read |
cloudwatch:GetMetricStatistics | Read |
cloudwatch:GetMetricStream | Read |
cloudwatch:GetMetricWidgetImage | Read |
cloudwatch:GetOmniDashboard | Read |
cloudwatch:GetOmniThread | Read |
cloudwatch:GetOTelEnrichment | Read |
cloudwatch:GetPreferences | Read |
cloudwatch:GetRecords | Read |
cloudwatch:GetResourceMetricsConfiguration | Read |
cloudwatch:GetService | Read |
cloudwatch:GetServiceData | Read |
cloudwatch:GetServiceLevelObjective | Read |
cloudwatch:GetSpace | Read |
cloudwatch:GetSpaceCredentials | Read |
cloudwatch:GetSpaceCredentialsForOrganization | Read |
cloudwatch:GetTelemetryQueryResults | Read |
cloudwatch:GetTopologyDiscoveryStatus | Read |
cloudwatch:GetTopologyMap | Read |
cloudwatch:GetView | Read |
cloudwatch:InvokeIntegration | Write |
cloudwatch:Link | Read |
cloudwatch:ListAccessGrants | Permissions |
cloudwatch:ListAccessProfiles | List |
cloudwatch:ListAlarmMuteRules | List |
cloudwatch:ListAlertContributors | List |
cloudwatch:ListAlerts | List |
cloudwatch:ListDashboards | List |
cloudwatch:ListDomainAccessGrantsForOrganization | Permissions |
cloudwatch:ListDomains | List |
cloudwatch:ListEntitiesForMetric | List |
cloudwatch:ListIngestionEndpoints | List |
cloudwatch:ListIntegrations | List |
cloudwatch:ListManagedInsightRules | List |
cloudwatch:ListMetrics | List |
cloudwatch:ListMetricStreams | List |
cloudwatch:ListOmniDashboards | List |
cloudwatch:ListOmniThreads | List |
cloudwatch:ListServiceLevelObjectives | List |
cloudwatch:ListServices | List |
cloudwatch:ListSpaceAccess | List |
cloudwatch:ListSpaces | List |
cloudwatch:ListSpacesForOrganization | List |
cloudwatch:ListTagsForResource | Tagging |
cloudwatch:ListTelemetryFields | List |
cloudwatch:ListTelemetryQuerySessions | List |
cloudwatch:ListViews | List |
cloudwatch:PutAlarmMuteRule | Write |
cloudwatch:PutAnomalyDetector | Write |
cloudwatch:PutCompositeAlarm | Write |
cloudwatch:PutDashboard | Write |
cloudwatch:PutInsightRule | Write |
cloudwatch:PutIntelligenceConfiguration | Write |
cloudwatch:PutLogAlarm | Write |
cloudwatch:PutManagedInsightRules | Write |
cloudwatch:PutMetricAlarm | Write |
cloudwatch:PutMetricData | Write |
cloudwatch:PutMetricStream | Write |
cloudwatch:PutPipelineRule | Write |
cloudwatch:PutRecords | Write |
cloudwatch:QueryTraces | Read |
cloudwatch:SearchPrincipals | List |
cloudwatch:SetAlarmState | Write |
cloudwatch:StartMetricStreams | Write |
cloudwatch:StartOmniThreadSession | Write |
cloudwatch:StartOTelEnrichment | Write |
cloudwatch:StartTelemetryQuery | Write |
cloudwatch:StartTelemetryQuerySession | Write |
cloudwatch:StopMetricStreams | Write |
cloudwatch:StopOTelEnrichment | Write |
cloudwatch:StopTelemetryQuery | Write |
cloudwatch:StopTelemetryQuerySession | Write |
cloudwatch:SubmitAlarmFeedback | Read |
cloudwatch:SubmitFeedback | Read |
cloudwatch:TagResource | Tagging |
cloudwatch:UntagResource | Tagging |
cloudwatch:UpdateAccessProfile | Write |
cloudwatch:UpdateAlert | Write |
cloudwatch:UpdateDomain | Write |
cloudwatch:UpdateDomainForOrganization | Write |
cloudwatch:UpdateIngestionEndpoint | Write |
cloudwatch:UpdateIntegration | Write |
cloudwatch:UpdateOmniDashboard | Write |
cloudwatch:UpdateOmniThread | Write |
cloudwatch:UpdateOTelEnrichment | Write |
cloudwatch:UpdatePreferences | Write |
cloudwatch:UpdateResourceMetricsConfiguration | Write |
cloudwatch:UpdateServiceLevelObjective | Write |
cloudwatch:UpdateSpace | Write |
cloudwatch:UpdateView | Write |
ARN patterns for resources in this service.
| Resource | ARN Pattern |
|---|---|
${ResourceType} | arn:aws:cloudwatch:${Region}:${Account}:${ResourceType}/${ResourcePath} |
Condition keys you can use in IAM policy conditions for this service.
aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeyscloudwatch:AlarmActionscloudwatch:HasAccessGrantcloudwatch:ResourceArncloudwatch:namespacecloudwatch:requestInsightRuleLogGroupscloudwatch:requestManagedResourceARNsEverything you need to know about Amazon CloudWatch on one page. HD quality, print-friendly.
Download Free InfographicEverything you need to know about Amazon CloudWatch on one page. HD quality, print-friendly.
Download Free Infographiccloudwatch