Monitoring & Observability: Reader policies
Metrics, logs, traces and application and network monitoring.
9 AWS managed policies. 2 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (9)
CloudWatch (4)
- AmazonCloudWatchRUMReadOnlyAccessReader
Grants read only permissions for the Amazon CloudWatch RUM service
- CloudWatchApplicationInsightsReadOnlyAccessReader
Provides read only access to CloudWatch Application Insights.
- CloudWatchSyntheticsReadOnlyAccessReader
Provides read only access to CloudWatch Synthetics.
- OAMReadOnlyAccessReader
Provides Read Only access to CloudWatch Observability Access Manager
DevOps Guru (1)
- AmazonDevOpsGuruReadOnlyAccessReader
Provides read only access to Amazon DevOps Guru Console.
AMP (1)
- AmazonPrometheusQueryAccessReader
Grants access to run queries against AWS Managed Prometheus resources
X-Ray (1)
- AWSXrayReadOnlyAccessReader
AWS X-Ray read only managed policy
Other services (2)
- AmazonRedshiftReadOnlyAccessReader
Provides read only access to Amazon Redshift via the AWS Management Console.
- AWSGrafanaConsoleReadOnlyAccessReader
Access to read only operations in Amazon Grafana.
Also relevant to Monitoring & Observability (14)
- AmazonAuroraDSQLReadOnlyAccessReader
Provides read only access to Aurora DSQL
- AmazonDocDBElasticReadOnlyAccessReader
Provides read-only access to Amazon DocDB-Elastic and CloudWatch metrics.
- AmazonDocDBReadOnlyAccessReader
Provides read-only access to Amazon DocumentDB with MongoDB compatibility. Note that this policy also grants access to Amazon RDS and Amazon Neptune resources.
- AmazonFSxConsoleReadOnlyAccessReader
Provides read only access to Amazon FSx and access to related AWS services via the AWS Management Console.
- AmazonKeyspacesReadOnlyAccessReader
Provide read only access to Amazon Keyspaces
- AmazonKeyspacesReadOnlyAccess_v2Reader
Provide read only access to Amazon Keyspaces and related AWS services.
- AmazonKinesisAnalyticsReadOnlyReader
Provides read-only access to Amazon Kinesis Analytics via the AWS Management Console.
- AmazonLookoutVisionConsoleReadOnlyAccessReader
Provides read only access to Amazon Lookout for Vision and scoped access to required service and console dependencies.
- AmazonMCSReadOnlyAccessReader
Provide read only access to Amazon Managed Apache Cassandra Service
- AmazonRDSReadOnlyAccessReader
Provides read only access to Amazon RDS via the AWS Management Console.
- AutoScalingConsoleReadOnlyAccessReader
Provides read-only access to Auto Scaling via the AWS Management Console.
- NeptuneGraphReadOnlyAccessReader
Provides read only access to all Amazon Neptune Analytics resources along with read only permissions for dependent services.
- SplitCostAllocationDataServiceRolePolicyReader
Allows split cost allocation data to retrieve AWS Organizations information, if applicable, and collect telemetry data for the split cost allocation data services that the customer has opted in to.
- TranslateReadOnlyReader
Provides read-only access to Amazon Translate.