Sharing CloudWatch Dashboard with logs widgets

Question

Hello,

I have shared a CW Dashboard via SSO. The dashboard contains CW logs and metrics widgets. Only the metrics widgets contain data. The logs widgets remain empty, no data displayed (only within the AWS console).
I have shortly tried to give the dashboard sharing role admin privilidges, but the log widgets still remained empty. What am I missing?

Best regards,
Andriy

Answer

By default, log data is not visible for others who you share the dashboard with.

On Dashboard in console,

Click Actions > Share Dashboard > Resources - IAM Role > Edit policy to include permissions as follows:

```
{
            "Effect": "Allow",
            "Action": [
                "logs:FilterLogEvents",
                "logs:StartQuery",
                "logs:StopQuery",
                "logs:GetLogRecord"
            ],
            "Resource": [
                "SharedLogGroup1ARN",
                "SharedLogGroup2ARN"
           ]
}
```

Read more on [documentation](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-dashboard-sharing.html#share-cloudwatch-dashboard-logwidget) for detailed instructions.

[1] https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch-dashboard-sharing.html#share-cloudwatch-dashboard-logwidget

Sharing CloudWatch Dashboard with logs widgets

相关内容