observabilityadmin:CreateCentralizationRuleForOrganization is a Write access-level action in the observabilityadmin service. Grants permission to create a new organization centralization rule with the specified name for the organization
ARNs that observabilityadmin:CreateCentralizationRuleForOrganization can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants observabilityadmin:CreateCentralizationRuleForOrganization.
Filters access by the tags that are passed in the request
Filters access by the tag keys that are passed in the request
Filters access by the backup region that is passed in the request
Filters access by the destination account that is passed in the request
Filters access by the destination region that is passed in the request
Filters access by the name of the centralization rule that is passed in the request
Filters access by the source account, organizational unit, or organization IDs that is passed in the request
Filters access by the source regions that are passed in the request
Filters access by the tags associated with the resource
A minimal policy that allows observabilityadmin:CreateCentralizationRuleForOrganization. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowObservabilityadminCreateCentralizationRuleForOrganization",
"Effect": "Allow",
"Action": "observabilityadmin:CreateCentralizationRuleForOrganization",
"Resource": "*"
}
]
}