AWS::CloudWatch::AccessGrant ScopedActions - AWS CloudFormation
SyntaxProperties
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::CloudWatch::AccessGrant ScopedActions

A group of actions within an access grant, together with the resource scopes and context conditions that apply to exactly those actions.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "Actions" : [ String, ... ],
  "ContextConditions" : {Key: Value, ...},
  "Resources" : [ ResourceScope, ... ]
}

YAML

  Actions: 
    - String
  ContextConditions: 
    Key: Value
  Resources: 
    - ResourceScope

Properties

Actions

The actions this group applies to, each in vendor-code:Action form.

Required: Yes

Type: Array of String

Minimum: 3 | 1

Maximum: 256 | 50

Update requires: Replacement

ContextConditions

Context conditions for fine-grained access control on these actions, as a map of condition keys to lists of allowed values.

Required: No

Type: Object of Array

Pattern: ^.+$

Update requires: Replacement

Resources

Resource scopes constraining these actions to specific resources.

Required: No

Type: Array of ResourceScope

Maximum: 10

Update requires: Replacement