ablog

不器用で落着きのない技術者のメモ

CloudWatch Alarm と SNS Topic 作成に必要な IAM ポリシー

CloudWatch Alarm と SNS Topic 作成に必要な IAM ポリシー。

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "VisualEditor0",
			"Effect": "Allow",
			"Action": [
				"cloudwatch:GetMetricData",
				"cloudwatch:ListMetrics",
				"cloudwatch:PutMetricAlarm",
				"cloudwatch:TagResource",
				"cloudwatch:DescribeAlarmHistory",
				"cloudwatch:UntagResource",
				"cloudwatch:DescribeAlarmsForMetric",
				"cloudwatch:ListTagsForResource",
				"cloudwatch:DescribeAlarms",
				"sns:publish",
				"sns:GetDataProtectionPolicy",
				"sns:Subscribe",
				"sns:CreateTopic",
				"sns:ListTopics",
				"sns:SetTopicAttributes",
				"sns:ListTagsForResource",
				"sns:GetSubscriptionAttributes",
				"sns:ListSubscriptionsByTopic",
				"sns:GetTopicAttributes"
			],
			"Resource": "*"
		}
	]
}