X-Ray
Prefix xray, 44 actions · Domain Monitoring & Observability
16 AWS managed policies. 4 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.
User access (4)
Operator and limited (9)
- AWSXRayAPIKeyAccessOperator
- AWSXrayCrossAccountSharingConfigurationOperator
- AWSXRayDaemonWriteAccessOperator
- AWSXrayWriteOnlyAccessOperator
- BedrockAgentCoreFullAccessOperator
- CloudWatchAgentAdminPolicyOperator
- CloudWatchAgentServerPolicyOperator
- CloudWatchLambdaApplicationSignalsExecutionRolePolicyOperator
- CloudWatchReadOnlyAccessOperator
Service-linked roles (3)
- AmazonCloudWatchRUMServiceRolePolicyOperator
- APIGatewayServiceRolePolicyOperator
- AWSAppSyncServiceRolePolicyOperator
Also grants X-Ray actions (34)
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonCloudWatchRUMReadOnlyAccess
- AmazonDevOpsGuruServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSElasticBeanstalkWebTier
- AWSElasticBeanstalkWorkerTier
- AWSLambda_FullAccess
- AWSLambda_ReadOnlyAccess
- AWSLambdaFullAccess
- AWSMcpServiceActionsFullAccess
- AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchApplicationSignalsFullAccess
- CloudWatchApplicationSignalsServiceRolePolicy
- CloudWatchSyntheticsFullAccess
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioProjectRoleMachineLearningPolicy
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
batchgettracesummarybyid batchgettraces callwithbearertoken canceltraceretrieval creategroup createsamplingrule deletegroup deleteresourcepolicy deletesamplingrule getdistincttracegraphs getencryptionconfig getgroup getgroups getindexingrules getinsight getinsightevents getinsightimpactgraph getinsightsummaries getretrievedtracesgraph getsamplingrules getsamplingstatisticsummaries getsamplingtargets getservicegraph gettimeseriesservicestatistics gettracegraph gettracesegmentdestination gettracesummaries link listresourcepolicies listretrievedtraces listtagsforresource putencryptionconfig putresourcepolicy putspans putspansforindexing puttelemetryrecords puttracesegments starttraceretrieval tagresource untagresource updategroup updateindexingrule updatesamplingrule updatetracesegmentdestination
Actions (44)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| xray:BatchGetTraceSummaryById | Read | 12 | 1 |
| xray:BatchGetTraces | List | 17 | 3 |
| xray:CallWithBearerToken | Write | 9 | 1 |
| xray:CancelTraceRetrieval | Read | 11 | 1 |
| xray:CreateGroup | Write | 8 | 1 |
| xray:CreateSamplingRule | Write | 8 | 1 |
| xray:DeleteGroup | Write | 8 | 1 |
| xray:DeleteResourcePolicy | Write | 8 | 1 |
| xray:DeleteSamplingRule | Write | 8 | 1 |
| xray:GetDistinctTraceGraphs | Read | 13 | 1 |
| xray:GetEncryptionConfig | Read | 15 | 1 |
| xray:GetGroup | Read | 20 | 2 |
| xray:GetGroups | Read | 21 | 2 |
| xray:GetIndexingRules | Read | 15 | 2 |
| xray:GetInsight | Read | 13 | 1 |
| xray:GetInsightEvents | Read | 13 | 1 |
| xray:GetInsightImpactGraph | Read | 14 | 1 |
| xray:GetInsightSummaries | Read | 13 | 1 |
| xray:GetRetrievedTracesGraph | Read | 12 | 1 |
| xray:GetSamplingRules | Read | 32 | 2 |
| xray:GetSamplingStatisticSummaries | Read | 22 | 1 |
| xray:GetSamplingTargets | Read | 27 | 1 |
| xray:GetServiceGraph | Read | 18 | 2 |
| xray:GetTimeSeriesServiceStatistics | Read | 15 | 1 |
| xray:GetTraceGraph | Read | 15 | 1 |
| xray:GetTraceSegmentDestination | Read | 20 | 4 |
| xray:GetTraceSummaries | Read | 23 | 1 |
| xray:Link | Write | 9 | 1 |
| xray:ListResourcePolicies | List | 20 | 2 |
| xray:ListRetrievedTraces | List | 14 | 3 |
| xray:ListTagsForResource | List | 19 | 2 |
| xray:PutEncryptionConfig | Permissions management | 8 | 1 |
| xray:PutResourcePolicy | Write | 8 | 1 |
| xray:PutSpans | Write | 8 | 1 |
| xray:PutSpansForIndexing | Write | 8 | 1 |
| xray:PutTelemetryRecords | Write | 20 | 1 |
| xray:PutTraceSegments | Write | 22 | 2 |
| xray:StartTraceRetrieval | Read | 11 | 3 |
| xray:TagResource | Tagging | 9 | 1 |
| xray:UntagResource | Tagging | 9 | 1 |
| xray:UpdateGroup | Write | 8 | 1 |
| xray:UpdateIndexingRule | Write | 9 | 1 |
| xray:UpdateSamplingRule | Write | 8 | 1 |
| xray:UpdateTraceSegmentDestination | Write | 10 | 1 |