oam:CreateLink

Write

oam:CreateLink is a Write access-level action in the oam service. Grants permission to create a link between a monitoring account and a source account for cross-account monitoring

Resource types

ARNs that oam:CreateLink can be scoped to in an IAM policy.

arn:${Partition}:oam:${Region}:${Account}:sink/${ResourceId}
Sink

Condition keys

Keys you can use in the Condition block of a policy that grants oam:CreateLink.

aws:ResourceTag/${TagKey} String

Filters access by tag key-value pairs attached to the resource

Dependent actions

To use oam:CreateLink you may also need to grant:

Example IAM policy

A minimal policy that allows oam:CreateLink. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowOamCreateLink",
      "Effect": "Allow",
      "Action": "oam:CreateLink",
      "Resource": "*"
    }
  ]
}

Related actions in oam

oam:CreateSink Write oam:DeleteLink Write oam:DeleteSink Write oam:GetLink Read oam:GetSink Read oam:GetSinkPolicy Read oam:ListAttachedLinks Read oam:ListLinks Read oam:ListSinks Read oam:ListTagsForResource Read oam:PutSinkPolicy Write oam:TagResource Tagging

View all oam actions →