AWS AmazonCloudWatch documentation change
Summary
Updated documentation to provide step-by-step console instructions for enabling Application Signals, added details about service-linked role permissions, and restructured content sections
Security assessment
Changes focus on operational setup process and IAM role permissions required for normal service operation. No mention of vulnerability fixes or security incidents. Service-linked role permissions are standard for feature functionality.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Signals-Enable.md b/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Signals-Enable.md index 04c3b6eb2..7d13df854 100644 --- a//AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Signals-Enable.md +++ b//AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Signals-Enable.md @@ -5 +5 @@ -# Enable Application Signals +# Enable Application Signals in your account @@ -7 +7 @@ -The topics in this section explain how to enable CloudWatch Application Signals in your environment. Application Signals is supported on Amazon EKS clusters with a setup workflow using the console. It's also supported on other platforms, including Amazon EC2, with a custom setup process. +If you haven't enabled Application Signals in this account yet, you must grant Application Signals the permissions it needs to discover your services. You need to do this only once for your account. @@ -9 +9 @@ The topics in this section explain how to enable CloudWatch Application Signals -###### Topics +###### To enable CloudWatch Application Signals, do the following. @@ -11 +11 @@ The topics in this section explain how to enable CloudWatch Application Signals - * [Getting started with Application Signals](./Getting-Started-App-Signals.html) + 1. Open the CloudWatch console at [https://console.aws.amazon.com/cloudwatch/](https://console.aws.amazon.com/cloudwatch/). @@ -13 +13 @@ The topics in this section explain how to enable CloudWatch Application Signals - * [Application Signals supported systems ](./CloudWatch-Application-Signals-supportmatrix.html) + 2. In the navigation pane, choose **Services**. @@ -15 +15 @@ The topics in this section explain how to enable CloudWatch Application Signals - * [Enable Application Signals on Amazon EKS clusters](./CloudWatch-Application-Signals-Enable-EKS.html) + 3. Choose **Start discovering your Services**. @@ -17 +17 @@ The topics in this section explain how to enable CloudWatch Application Signals - * [Enable Application Signals on Amazon EC2, Amazon ECS, Kubernetes, or Lambda](./CloudWatch-Application-Signals-Enable-Other.html) + 4. Select the check box and choose **Start discovering Services**. @@ -19 +19 @@ The topics in this section explain how to enable CloudWatch Application Signals - * [Enable Application Signals on Amazon ECS, Amazon EKS, or Lambda using AWS CDK](./CloudWatch-Application-Signals-Enable-EKS-CDK.html) +Completing this step for the first time in your account creates the **AWSServiceRoleForCloudWatchApplicationSignals** service-linked role. This role grants Application Signals the following permissions: @@ -21 +21 @@ The topics in this section explain how to enable CloudWatch Application Signals - * [Update to required versions of agents or Amazon EKS add-on](./CloudWatch-Application-Signals-Agent-Versions.html) + * `xray:GetServiceGraph` @@ -23 +23 @@ The topics in this section explain how to enable CloudWatch Application Signals - * [Troubleshooting your Application Signals installation](./CloudWatch-Application-Signals-Enable-Troubleshoot.html) + * `logs:StartQuery` @@ -25 +25,11 @@ The topics in this section explain how to enable CloudWatch Application Signals - * [Configuring Application Signals](./CloudWatch-Application-Signals-Configure.html) + * `logs:GetQueryResults` + + * `cloudwatch:GetMetricData` + + * `cloudwatch:ListMetrics` + + * `tag:GetResources` + +For more information about this role, see [Service-linked role permissions for CloudWatch Application Signals](./using-service-linked-roles.html#service-linked-role-signals). + + 5. Choose **Enable Application Signals**. @@ -36 +46 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Permissions required for Application Signals +Supported instrumentation setups @@ -38 +48 @@ Permissions required for Application Signals -Getting started +(Optional) Try out Application Signals with a sample app