Monitoring & Observability: Admin policies
Metrics, logs, traces and application and network monitoring.
15 AWS managed policies. 3 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (15)
CloudWatch (8)
- AmazonCloudWatchRUMFullAccessAdmin
Grants full access permissions for the Amazon CloudWatch RUM service
- CloudWatchApplicationInsightsFullAccessAdmin
Provides full access to CloudWatch Application Insights and required dependencies.
- CloudWatchApplicationSignalsFullAccessAdmin
Provide full access to CloudWatch Application Signals service and scoped access to the dependencies needed to use and operate this service.
- CloudWatchFullAccessAdmin
Provides full access to CloudWatch.
- CloudWatchFullAccessV2Admin
Provides full access to CloudWatch.
- CloudWatchLogsFullAccessAdmin
Provides full access to CloudWatch Logs
- CloudWatchSyntheticsFullAccessAdmin
Provides full access to CloudWatch Synthetics.
- OAMFullAccessAdmin
Provides full access to CloudWatch Observability Access Manager
DevOps Guru (2)
- AmazonDevOpsGuruConsoleFullAccessAdmin
The policy grants full-access to the DevOps Guru console.
- AmazonDevOpsGuruFullAccessAdmin
Provides full access to Amazon DevOps Guru.
AMP (1)
- AmazonPrometheusFullAccessAdmin
Grants full access to AWS Managed Prometheus resources
X-Ray (1)
- AWSXrayFullAccessAdmin
AWS X-Ray full access managed policy
Other services (3)
- AmazonBraketFullAccessAdmin
Provides full access to Amazon Braket via the AWS Management Console and SDK. Also provides access to related services (e.g., S3, logs).
- AWSGrafanaAccountAdministratorAdmin
Provides access within Amazon Grafana to create and manage workspaces for the entire organization.
- AWSPanoramaFullAccessAdmin
Provides full access to AWS Panorama
Also relevant to Monitoring & Observability (17)
- AmazonDataZoneProjectRolePermissionsBoundaryAdmin
Amazon DataZone creates IAM roles for projects to perform data analytics actions, and uses this policy when creating these roles to define the boundary of their permissions.
- AmazonEC2FullAccessAdmin
Provides full access to Amazon EC2 via the AWS Management Console.
- AmazonEC2RoleforDataPipelineRoleHigh privilegeAdmin
Default policy for the Amazon EC2 Role for Data Pipeline service role.
- AmazonElasticMapReduceforEC2RoleHigh privilegeAdmin
Default policy for the Amazon Elastic MapReduce for EC2 service role.
- AmazonElasticMapReduceFullAccessHigh privilegeAdmin
This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-managed-iam-policies.html. Provides full access to Amazon Elastic MapReduce and underlying services that it req…
- AmazonKeyspacesFullAccessAdmin
Provide full access to Amazon Keyspaces
- AmazonLaunchWizard_FullaccessAdmin
Full access to AWS Launch wizard and other required services.
- AmazonLaunchWizardFullAccessV2Admin
Full access to AWS Launch wizard and other required services.
- AmazonMonitronFullAccessAdmin
Provides full access to manage Amazon Monitron
- AmazonRedshiftFullAccessAdmin
Provides full access to Amazon Redshift via the AWS Management Console.
- AmazonSSMFullAccessAdmin
Provides full access to Amazon SSM.
- AWSBatchFullAccessAdmin
Provides full access for AWS Batch resources.
- AWSLambdaFullAccessHigh privilegeAdmin
This policy is on a deprecation path. See documentation for guidance: https://docs.aws.amazon.com/lambda/latest/dg/access-control-identity-based.html. Provides full access to Lambda, S3, DynamoDB, CloudWatch Metrics and Logs.
- AWSShieldDRTAccessPolicyAdmin
Provides the AWS DDoS Response Team with limited access to your AWS account to assist with DDoS attack mitigation during a high-severity event.
- DatabaseAdministratorHigh privilegeAdmin
Grants full access permissions to AWS services and actions required to set up and configure AWS database services.
- ServiceQuotasFullAccessAdmin
Provides full access to Service Quotas
- SystemAdministratorHigh privilegeAdmin
Grants full access permissions necessary for resources required for application and development operations.