Metricsbird
Search…
Permissions
Good to know: For detailed information on CloudWatch specific actions, and condition context keys for use in IAM permission policies, review the documentation here on the AWS website.

CloudWatch Metrics

Actions
Description
ListMetricStreams
Grants permission to return a list of all CloudWatch metric streams in your account
PutMetricStream
Grants permission to create a CloudWatch metric stream, or update an existing metric stream if it already exists
StartMetricStreams
Grants permission to start all CloudWatch metric streams
StopMetricStreams
Grants permission to stop all CloudWatch metric streams
DeleteMetricStream
Grants permission to delete the CloudWatch metric stream
TagResource
Grants permission to add tags to an Amazon CloudWatch resource
ListTagsForResource
Grants permission to list tags for an Amazon CloudWatch resource

CloudWatch Logs

Actions
Description
GetLogEvents
Grants permissions to retrieve log events from the specified log stream
GetLogGroupFields
Grants permissions to return a list of the fields that are included in log events in the specified log group, along with the percentage of log events that contain each field
GetLogRecord
Grants permissions to retrieve all the fields and values of a single log event
TagLogGroup
Grants permissions to add or update the specified tags for the specified log group
PutRetentionPolicy
Grants permissions to create or update a resource policy allowing other AWS services to put log events to this account
PutDestination
Grants permissions to create or update a Destination
PutSubscriptionFilter
Grants permissions to create or update a subscription filter and associates it with the specified log group
Copy link
On this page
CloudWatch Metrics
CloudWatch Logs