AWS Managed Policies Explorer

Home About

AWS Managed Policies. A maze of twisty passages all alike. Explore them here. If it looks like a button, it's clickable. Always up to date.

Service: Amazon CloudWatch

Short Name:

cloudwatch

ARN Format:arn:aws:cloudwatch:${Region}:${Account}:${ResourceType}/${ResourcePath}

ARN Regex:^arn:aws:cloudwatch:.+

ReadOnlyAccess

…

AWSCodeBuildReadOnlyAccess

Action	Reference	Description
cloudwatch:ListDashboards	Docs	Grants permission to return a list of all CloudWatch dashboards in your account
cloudwatch:ListMetrics	Docs	Grants permission to retrieve a list of valid metrics stored for the AWS account owner
cloudwatch:ListMetricStreams	Docs	Grants permission to return a list of all CloudWatch metric streams in your account
cloudwatch:ListServiceLevelObjectives	Docs	Grants permission to list service level objectives
cloudwatch:ListServices	Docs	Grants permission to list services
cloudwatch:ListTagsForResource	Docs	Grants permission to list tags for an Amazon CloudWatch resource
cloudwatch:BatchGetServiceLevelIndicatorReport	Docs	Grants permission to batch get service level indicator report
cloudwatch:BatchGetServiceLevelObjectiveBudgetReport	Docs	Grants permission to batch retrieve a service level objective budget report
cloudwatch:DescribeAlarmHistory	Docs	Grants permission to retrieve the history for the specified alarm
cloudwatch:DescribeAlarms	Docs	Grants permission to describe all alarms, currently owned by the user's account
cloudwatch:DescribeAlarmsForMetric	Docs	Grants permission to describe all alarms configured on the specified metric, currently owned by the user's account
cloudwatch:DescribeAnomalyDetectors	Docs	Grants permission to list the anomaly detection models that you have created in your account
cloudwatch:DescribeInsightRules	Docs	Grants permission to describe all insight rules, currently owned by the user's account
cloudwatch:GenerateQuery	Docs	Grants permission to generate a Metrics Insights or Logs Insights query string from a natural language prompt
cloudwatch:GetDashboard	Docs	Grants permission to display the details of the CloudWatch dashboard you specify
cloudwatch:GetInsightRuleReport	Docs	Grants permission to return the top-N report of unique contributors over a time range for a given insight rule
cloudwatch:GetMetricData	Docs	Grants permission to retrieve batch amounts of CloudWatch metric data and perform metric math on retrieved data
cloudwatch:GetMetricStatistics	Docs	Grants permission to retrieve statistics for the specified metric
cloudwatch:GetMetricStream	Docs	Grants permission to return the details of a CloudWatch metric stream
cloudwatch:GetMetricWidgetImage	Docs	Grants permission to retrieve snapshots of metric widgets
cloudwatch:GetService	Docs	Grants permission to retrieve information about a service
cloudwatch:GetServiceData	Docs	Grants permission to retrieve service data
cloudwatch:GetServiceLevelObjective	Docs	Grants permission to retrieve information about service level objective
cloudwatch:GetTopologyDiscoveryStatus	Docs	Grants permission to retrieve a CloudWatch topology discovery status
cloudwatch:GetTopologyMap	Docs	Grants permission to retrieve a CloudWatch topology map
cloudwatch:ListManagedInsightRules	Docs	Grants permission to list available managed Insight Rules for a given Resource ARN
cloudwatch:TagResource	Docs	Grants permission to add tags to an Amazon CloudWatch resource
cloudwatch:UntagResource	Docs	Grants permission to remove a tag from an Amazon CloudWatch resource
cloudwatch:CreateServiceLevelObjective	Docs	Grants permission to create a service level objective
cloudwatch:DeleteAlarms	Docs	Grants permission to delete a collection of alarms
cloudwatch:DeleteAnomalyDetector	Docs	Grants permission to delete the specified anomaly detection model from your account
cloudwatch:DeleteDashboards	Docs	Grants permission to delete all CloudWatch dashboards that you specify
cloudwatch:DeleteInsightRules	Docs	Grants permission to delete a collection of insight rules
cloudwatch:DeleteMetricStream	Docs	Grants permission to delete the CloudWatch metric stream that you specify
cloudwatch:DeleteServiceLevelObjective	Docs	Grants permission to delete a service level objective
cloudwatch:DisableAlarmActions	Docs	Grants permission to disable actions for a collection of alarms
cloudwatch:DisableInsightRules	Docs	Grants permission to disable a collection of insight rules
cloudwatch:EnableAlarmActions	Docs	Grants permission to enable actions for a collection of alarms
cloudwatch:EnableInsightRules	Docs	Grants permission to enable a collection of insight rules
cloudwatch:EnableTopologyDiscovery	Docs	Grants permission to enable a CloudWatch topology discovery
cloudwatch:Link	Docs	Grants permission to share CloudWatch resources with a monitoring account
cloudwatch:PutAnomalyDetector	Docs	Grants permission to create or update an anomaly detection model for a CloudWatch metric
cloudwatch:PutCompositeAlarm	Docs	Grants permission to create or update a composite alarm
cloudwatch:PutDashboard	Docs	Grants permission to create a CloudWatch dashboard, or update an existing dashboard if it already exists
cloudwatch:PutInsightRule	Docs	Grants permission to create a new insight rule or replace an existing insight rule
cloudwatch:PutManagedInsightRules	Docs	Grants permission to create managed Insight Rules
cloudwatch:PutMetricAlarm	Docs	Grants permission to create or update an alarm and associates it with the specified Amazon CloudWatch metric
cloudwatch:PutMetricData	Docs	Grants permission to publish metric data points to Amazon CloudWatch
cloudwatch:PutMetricStream	Docs	Grants permission to create a CloudWatch metric stream, or update an existing metric stream if it already exists
cloudwatch:SetAlarmState	Docs	Grants permission to temporarily set the state of an alarm for testing purposes
cloudwatch:StartMetricStreams	Docs	Grants permission to start all CloudWatch metric streams that you specify
cloudwatch:StopMetricStreams	Docs	Grants permission to stop all CloudWatch metric streams that you specify
cloudwatch:UpdateServiceLevelObjective	Docs	Grants permission to update a service level objective

aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeyscloudwatch:AlarmActionscloudwatch:namespacecloudwatch:requestInsightRuleLogGroupscloudwatch:requestManagedResourceARNs