AWS::CloudWatch::AccessGrant ResourceScope - AWS CloudFormation
SyntaxProperties
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::CloudWatch::AccessGrant ResourceScope

A single resource scope entry within an access grant. Associates a resource type with optional ARN patterns, tag conditions, and row-level filters.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "ResourceArns" : [ String, ... ],
  "ResourceType" : String,
  "RowScopeGroups" : [ [ , ... ], ... ],
  "SignalTypes" : [ String, ... ],
  "Tags" : {Key: Value, ...}
}

YAML

  ResourceArns: 
    - String
  ResourceType: String
  RowScopeGroups: 
    - 
    - 
  SignalTypes: 
    - String
  Tags: 
    Key: Value

Properties

ResourceArns

Specific resource ARNs or ARN patterns. When set, actions are limited to these resources. When absent, defaults to all resources of the type.

Required: No

Type: Array of String

Maximum: 5

Update requires: Replacement

ResourceType

The resource type name, for example DataSet or OmniDashboard.

Required: Yes

Type: String

Update requires: Replacement

RowScopeGroups

Row-level filters for this scope, as an OR of AND-groups: a row is visible when it matches every filter in any one group. Requires SignalTypes.

Required: No

Type: Array of Array

Minimum: 1

Maximum: 20

Update requires: Replacement

SignalTypes

Signal types this scope's row filtering applies to. Required when RowScopeGroups is set.

Required: No

Type: Array of String

Allowed values: LOGS | TRACES

Minimum: 1

Maximum: 3

Update requires: Replacement

Tags

Tag-based conditions for dynamic resource scoping. Access applies only to resources carrying all of the specified tag key-value pairs.

Required: No

Type: Object of String

Pattern: ^.+$

Update requires: Replacement