AWS IAM Policy Document for CloudWatch Management

This snippet outlines an IAM policy document in JSON format that grants permissions to manage CloudWatch Dashboards and Logs. It includes actions such as creating, getting, and deleting dashboards and logs, allowing full management capabilities for monitoring and logging services in AWS.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "ManageCloudWatchDashboard",
            "Effect": "Allow",
            "Action": [
                "cloudwatch:PutDashboard",
                "cloudwatch:GetDashboard",
                "cloudwatch:DeleteDashboards",
                "cloudwatch:ListDashboards",
                "cloudwatch:GetMetricData",
                "cloudwatch:GetMetricStatistics",
                "cloudwatch:ListMetrics"
            ],
            "Resource": "*"
        },
        {
            "Sid": "ManageCloudWatchLogs",
            "Effect": "Allow",
            "Action": [
                "logs:CreateLogGroup",
                "logs:CreateLogStream",
                "logs:PutLogEvents",
                "logs:DescribeLogGroups",
                "logs:DescribeLogStreams",
                "logs:GetLogEvents",
                "logs:DeleteLogGroup",
                "logs:DeleteLogStream"
            ],
            "Resource": "*"
        },
        {
            "Sid": "ViewOnlyBilling",
            "Effect": "Allow",
            "Action": [
                "aws-portal:ViewBilling",
                "aws-portal:ViewUsage",
                "ce:GetCostAndUsage",
                "ce:GetCostForecast",
                "ce:GetReservationUtilization",
                "ce:GetSavingsPlansUtilization",
                "ce:ListCostAllocationTags"
            ],
            "Resource": "*"
        },
        {
            "Sid": "ManageApiGateway",
            "Effect": "Allow",
            "Action": [
                "apigateway:GET",
                "apigateway:POST",
                "apigateway:PUT",
                "apigateway:DELETE",
                "apigateway:PATCH",
                "apigateway:CreateRestApi",
                "apigateway:DeleteRestApi",
                "apigateway:DeployRestApi",
                "apigateway:CreateApi",
                "apigateway:DeleteApi",
                "apigateway:UpdateApi",
                "apigateway:CreateDeployment",
                "apigateway:DeleteDeployment",
                "apigateway:GetDeployments",
                "apigateway:ManageVpcLinks",
                "apigateway:TagResource",
                "apigateway:UntagResource"
            ],
            "Resource": "*"
        }
    ]
}

Editor is loading...