Skip to main content
IAM Policy Map

Monitoring & Observability: Analyst policies

Metrics, logs, traces and application and network monitoring.

4 AWS managed policies. 1 have reviewed guidance; the rest have authoritative permission data pending editorial review.

User access (3)

CloudWatch (3)

  • CloudWatchApplicationSignalsReadOnlyAccessAnalyst

    Provides read only access to CloudWatch Application Signals service and scoped access to the dependencies needed to use this service

  • CloudWatchInternetMonitorReadOnlyAccessAnalyst

    Provides read only access to actions for working with Amazon CloudWatch Internet Monitor. Also provides access to other services in Amazon CloudWatch, including policies to retrieve information on CloudWatch metrics and to manage log querie…

  • CloudWatchLogsReadOnlyAccessAnalyst

    Provides read only access to CloudWatch Logs

Service roles (1)

CloudWatch (1)

  • AmazonGrafanaCloudWatchAccessAnalyst

    This policy grants access to Amazon CloudWatch and the dependencies needed to use CloudWatch as a datasource within Amazon Managed Grafana.

Also relevant to Monitoring & Observability (2)
  • AmazonEKSMCPReadOnlyAccessAnalyst

    Provides read-only access to the Amazon EKS MCP service. This policy grants permissions to use only read-only tools in the EKS MCP service meant for observability, troubleshooting, retrieving EKS resource information, and getting EKS-optimi…

  • AWSLambda_ReadOnlyAccessAnalyst

    Grants read-only access to AWS Lambda service, AWS Lambda console features, and other related AWS services.

IAM Policy MapCreated by Mavrick HardingUnofficial community resource. Not affiliated with, endorsed by or sponsored by Amazon Web Services.