本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
CloudWatchReadOnlyAccess
描述:提供对的只读访问权限 CloudWatch。
CloudWatchReadOnlyAccess
是一项 AWS 托管式策略。
使用此策略
您可以将 CloudWatchReadOnlyAccess
附加到您的用户、组和角色。
策略详细信息
-
类型: AWS 托管策略
-
创作时间:2015 年 2 月 6 日 18:40 UTC
-
编辑时间:2024 年 11 月 21 日 17:51 UTC
-
ARN:
arn:aws:iam::aws:policy/CloudWatchReadOnlyAccess
策略版本
策略版本:v10 (默认值)
此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时, AWS 会检查策略的默认版本以确定是否允许该请求。
JSON政策文件
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "CloudWatchReadOnlyAccessPermissions",
"Effect" : "Allow",
"Action" : [
"application-autoscaling:DescribeScalingPolicies",
"application-signals:BatchGet*",
"application-signals:Get*",
"application-signals:List*",
"autoscaling:Describe*",
"cloudwatch:BatchGet*",
"cloudwatch:Describe*",
"cloudwatch:GenerateQuery",
"cloudwatch:Get*",
"cloudwatch:List*",
"logs:Get*",
"logs:List*",
"logs:StartQuery",
"logs:StopQuery",
"logs:Describe*",
"logs:TestMetricFilter",
"logs:FilterLogEvents",
"logs:StartLiveTail",
"logs:StopLiveTail",
"oam:ListSinks",
"sns:Get*",
"sns:List*",
"rum:BatchGet*",
"rum:Get*",
"rum:List*",
"synthetics:Describe*",
"synthetics:Get*",
"synthetics:List*",
"xray:BatchGet*",
"xray:Get*",
"xray:List*",
"xray:StartTraceRetrieval",
"xray:CancelTraceRetrieval"
],
"Resource" : "*"
},
{
"Sid" : "OAMReadPermissions",
"Effect" : "Allow",
"Action" : [
"oam:ListAttachedLinks"
],
"Resource" : "arn:aws:oam:*:*:sink/*"
},
{
"Sid" : "CloudWatchReadOnlyGetRolePermissions",
"Effect" : "Allow",
"Action" : "iam:GetRole",
"Resource" : "arn:aws:iam::*:role/aws-service-role/application-signals.cloudwatch.amazonaws.com/AWSServiceRoleForCloudWatchApplicationSignals"
}
]
}