cloudwatch:PutInsightRule is a Write access-level action in the cloudwatch service. Grants permission to create a new insight rule or replace an existing insight rule
ARNs that cloudwatch:PutInsightRule can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants cloudwatch:PutInsightRule.
Filters access by the presence of tags in the request
Filters access by the presence of tags in the request
Filters access by the Log Groups specified in an Insight Rule
Filters access by tags associated with the resource
A minimal policy that allows cloudwatch:PutInsightRule. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowCloudwatchPutInsightRule",
"Effect": "Allow",
"Action": "cloudwatch:PutInsightRule",
"Resource": "*"
}
]
}