Amazon Managed Service for Prometheus (aps)

Additions

Actions

• CreateAnomalyDetector
  
  • Description:  Grants permission to create an anomaly detector
  • Access:  Write
  • Resources: 

    Name: workspace

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteAnomalyDetector
  
  • Description:  Grants permission to delete an anomaly detector
  • Access:  Write
  • Resources: 

    Name: anomalydetector

    Required: Yes

    Name: workspace

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteScraperLoggingConfiguration
  
  • Description:  Grants permission to delete a scraper logging configuration
  • Access:  Write
  • Resources: 

    Name: scraper

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DescribeAnomalyDetector
  
  • Description:  Grants permission to describe an anomaly detector
  • Access:  Read
  • Resources: 

    Name: anomalydetector

    Required: Yes

    Name: workspace

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DescribeScraperLoggingConfiguration
  
  • Description:  Grants permission to describe a scraper logging configuration
  • Access:  Read
  • Resources: 

    Name: scraper

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListAnomalyDetectors
  
  • Description:  Grants permission to list anomaly detectors
  • Access:  List
  • Resources: 

    Name: workspace

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• PreviewAnomalyDetector
  
  • Description:  Grants permission to preview anomaly detection on AMP workspace metrics
  • Access:  Read
  • Resources: 

    Name: workspace

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• PutAnomalyDetector
  
  • Description:  Grants permission to update an anomaly detector
  • Access:  Write
  • Resources: 

    Name: anomalydetector

    Required: Yes

    Name: workspace

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• UpdateScraperLoggingConfiguration
  
  • Description:  Grants permission to put a scraper logging configuration
  • Access:  Write
  • Resources: 

    Name: scraper

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

Resources

• anomalydetector
  
  • Arn:  arn:${Partition}:aps:${Region}:${Account}:anomalydetector/${WorkspaceId}/${AnomalyDetectorId}
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:ResourceTag/${TagKey}

    aws:TagKeys

Updates

Actions

• QueryMetrics
  
  Resources
  
  • ＋ anomalydetector