AWS AmazonCloudWatch documentation change
Summary
Added documentation for four new CloudWatch API operations and their required IAM permissions: GetOTelEnrichment, ListTagsForResource, StartOTelEnrichment, and StopOTelEnrichment.
Security assessment
This change adds documentation for new IAM permissions related to OpenTelemetry enrichment and resource tagging. While these are security-related permissions (access control), there is no evidence in the diff that this addresses a specific security vulnerability or incident. The changes appear to be routine documentation updates for new features.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/permissions-reference-cw.md b/AmazonCloudWatch/latest/monitoring/permissions-reference-cw.md index de287baf0..55d13836d 100644 --- a//AmazonCloudWatch/latest/monitoring/permissions-reference-cw.md +++ b//AmazonCloudWatch/latest/monitoring/permissions-reference-cw.md @@ -54,0 +55 @@ CloudWatch API operations | Required permissions (API actions) +[GetOTelEnrichment](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_GetOTelEnrichment.html) | `cloudwatch:GetOTelEnrichment` Required to retrieve the status of OpenTelemetry enrichment for vended metrics. @@ -58,0 +60 @@ ListEntitiesForMetric (CloudWatch console-only permission) | `cloudwatch:ListEn +[ListTagsForResource](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_ListTagsForResource.html) | `cloudwatch:ListTagsForResource` Required to list the tags associated with a CloudWatch resource. @@ -65,0 +68 @@ ListEntitiesForMetric (CloudWatch console-only permission) | `cloudwatch:ListEn +[StartOTelEnrichment](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_StartOTelEnrichment.html) | `cloudwatch:StartOTelEnrichment` Required to enable OpenTelemetry enrichment for vended metrics, making them queryable via PromQL. @@ -66,0 +70 @@ ListEntitiesForMetric (CloudWatch console-only permission) | `cloudwatch:ListEn +[StopOTelEnrichment](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_StopOTelEnrichment.html) | `cloudwatch:StopOTelEnrichment` Required to disable OpenTelemetry enrichment for vended metrics.