aps:DescribeLoggingConfiguration is a Read access-level action in the aps service. Grants permission to describe a logging configuration
ARNs that aps:DescribeLoggingConfiguration can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants aps:DescribeLoggingConfiguration.
Filters access based on the tags that are passed in the request
Filters access based on the tags associated with the resource
Filters access based on the tag keys that are passed in the request
A minimal policy that allows aps:DescribeLoggingConfiguration. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowApsDescribeLoggingConfiguration",
"Effect": "Allow",
"Action": "aps:DescribeLoggingConfiguration",
"Resource": "*"
}
]
}