xray

43 actions in the xray service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

xray:BatchGetTraces

List

Grants permission to retrieve a list of traces specified by ID. Each trace is a collection of segment documents that originates from a single request. Use GetTraceSummaries to get a list of trace IDs

xray:BatchGetTraceSummaryById

Read

Grants permission to retrieve metadata for a list of traces specified by ID

xray:CancelTraceRetrieval

Read

Grants permission to cancel an ongoing trace retrieval job initiated by StartTraceRetrieval using the provided RetrievalToken. A successful cancellation will return an HTTP 200 response

xray:CreateGroup

Write

Grants permission to create a group resource with a name and a filter expression

xray:CreateSamplingRule

Write

Grants permission to create a rule to control sampling behavior for instrumented applications

xray:DeleteGroup

Write

Grants permission to delete a group resource

xray:DeleteResourcePolicy

Write

Grants permission to delete resource policies

xray:DeleteSamplingRule

Write

Grants permission to delete a sampling rule

xray:GetDistinctTraceGraphs

Read

Grants permission to retrieve distinct service graphs for one or more specific trace IDs

xray:GetEncryptionConfig

Read

Grants permission to retrieve the current encryption configuration for X-Ray data

xray:GetGroup

Read

Grants permission to retrieve group resource details

xray:GetGroups

Read

Grants permission to retrieve all active group details

xray:GetIndexingRules

Read

Grants permission to retrieve all indexing rules. Indexing rules are used to determine the server-side sampling rate for spans ingested through the CloudWatchLogs destination and indexed by X-Ray

xray:GetInsight

Read

Grants permission to retrieve the details of a specific insight

xray:GetInsightEvents

Read

Grants permission to retrieve the events of a specific insight

xray:GetInsightImpactGraph

Read

Grants permission to retrieve the part of the service graph which is impacted for a specific insight

xray:GetInsightSummaries

Read

Grants permission to retrieve the summary of all insights for a group and time range with optional filters

xray:GetRetrievedTracesGraph

Read

Grants permission to retrieve a service graph for traces based on the specified RetrievalToken from the Transaction Search CloudWatch log group

xray:GetSamplingRules

Read

Grants permission to retrieve all sampling rules

xray:GetSamplingStatisticSummaries

Read

Grants permission to retrieve information about recent sampling results for all sampling rules

xray:GetSamplingTargets

Read

Grants permission to request a sampling quota for rules that the service is using to sample requests

xray:GetServiceGraph

Read

Grants permission to retrieve a document that describes services that process incoming requests, and downstream services that they call as a result

xray:GetTimeSeriesServiceStatistics

Read

Grants permission to retrieve an aggregation of service statistics defined by a specific time range bucketed into time intervals

xray:GetTraceGraph

Read

Grants permission to retrieve a service graph for one or more specific trace IDs

xray:GetTraceSegmentDestination

Read

Grants permission to retrieve the current destination of data sent to PutTraceSegments and OpenTelemetry API

xray:GetTraceSummaries

Read

Grants permission to retrieve IDs and metadata for traces available for a specified time frame using an optional filter. To get the full traces, pass the trace IDs to BatchGetTraces

xray:Link

Write

Grants permission to share X-Ray resources with a monitoring account

xray:ListResourcePolicies

List

Grants permission to list resource policies

xray:ListRetrievedTraces

List

Grants permission to retrieve a list of traces for a given RetrievalToken from the Transaction Search CloudWatch log group

xray:ListTagsForResource

List

Grants permission to list tags for an X-Ray resource

xray:PutEncryptionConfig

Permissions management

Grants permission to update the encryption configuration for X-Ray data

xray:PutResourcePolicy

Write

Grants permission to create or update resource policies

xray:PutSpans

Write

Grants permission to upload OpenTelemetry spans to AWS X-Ray

xray:PutSpansForIndexing

Write

Grants permission to upload spans to AWS X-Ray to be indexed

xray:PutTelemetryRecords

Write

Grants permission to send AWS X-Ray daemon telemetry to the service

xray:PutTraceSegments

Write

Grants permission to upload segment documents to AWS X-Ray. The X-Ray SDK generates segment documents and sends them to the X-Ray daemon, which uploads them in batches

xray:StartTraceRetrieval

Read

Grants permission to initiate a trace retrieval process using the specified time range and for the given trace IDs on the Transaction Search CloudWatch log group

xray:TagResource

Tagging

Grants permission to add tags to an X-Ray resource

xray:UntagResource

Tagging

Grants permission to remove tags from an X-Ray resource

xray:UpdateGroup

Write

Grants permission to update a group resource

xray:UpdateIndexingRule

Write

Grants permission to modify an indexing rule's configuration

xray:UpdateSamplingRule

Write

Grants permission to modify a sampling rule's configuration

xray:UpdateTraceSegmentDestination

Write

Grants permission to modify the destination of data sent to PutTraceSegments and OpenTelemetry API