oam:CreateLink is a Write access-level action in the oam service. Grants permission to create a link between a monitoring account and a source account for cross-account monitoring
ARNs that oam:CreateLink can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants oam:CreateLink.
Filters access by the presence of tag key-value pairs in the request
Filters access by the presence of tag keys in the request
Filters access by the presence of resource types in the request
Filters access by tag key-value pairs attached to the resource
A minimal policy that allows oam:CreateLink. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowOamCreateLink",
"Effect": "Allow",
"Action": "oam:CreateLink",
"Resource": "*"
}
]
}