By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

IAM Policy to get specific CloudWatch GetMetricData, ListMetrics

0

I set IAM Policy to get CloudWatch GetMetricData, ListMetrics about specific instance or lambda. but I get all metrics. I don't want to get all metrics. How can I get specific instance or lambda using IAM Policy?

Topics
ServerlessComputeManagement & GovernanceSecurity, Identity, & Compliance
Tags
AWS LambdaAmazon CloudWatchIAM Policies
Language
English
rePost-User-6602312
asked a year ago2551 views
2 Answers
0

You can restrict access to specific alarms and dashboards by using their Amazon Resource Names (ARNs) in your policies.

Please follow the below link for more details: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/iam-access-control-overview-cw.html

profile pictureAWS
Gautam Kumar
answered a year ago
  • rePost-User-6602312
    a year ago

    In this link, "Resource – Use an Amazon Resource Name (ARN) to identify the resource that the policy applies to. CloudWatch does not have any resources for you to control using policies resources, so use the wildcard character (*) in IAM policies. For more information, see CloudWatch resources and operations." I tested this using ARN. this can't be applied. I think I can't get specific metric data. Is it right? @Gautam Kumar

0

Unfortunately, if you look at https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncloudwatch.html, you will see it is currently not possible to restrict GetMetricData or ListMetrics with any resource type or condition key - which corresponds to the sentence you highlighted that explains you have to use the wildcard character (*) in IAM policies.

I am not aware of a workaround and wouldn't know what to advise.

profile pictureAWS
Jsc
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content