AWS AmazonCloudWatch documentation change
Summary
Added documentation for PromQL widget visibility in shared dashboards
Security assessment
Documents new permission requirements for dashboard features without security implications. Feature enhancement unrelated to vulnerabilities.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/cloudwatch-dashboard-sharing.md b/AmazonCloudWatch/latest/monitoring/cloudwatch-dashboard-sharing.md index ef2185755..336125224 100644 --- a//AmazonCloudWatch/latest/monitoring/cloudwatch-dashboard-sharing.md +++ b//AmazonCloudWatch/latest/monitoring/cloudwatch-dashboard-sharing.md @@ -7 +7 @@ -Permissions required to share a dashboardPermissions that are granted to people who you share the dashboard withAllowing people that you share with to see composite alarmsAllowing people that you share with to see logs table widgetsAllowing people that you share with to see custom widgets +Permissions required to share a dashboardPermissions that are granted to people who you share the dashboard withAllowing people that you share with to see composite alarmsAllow widgets that use PromQL queries to be visible in shared dashboardsAllowing people that you share with to see logs table widgetsAllowing people that you share with to see custom widgets @@ -158,0 +159,31 @@ The preceding policy statement give access to all alarms in the account. To redu +## Allow widgets that use PromQL queries to be visible in shared dashboards + +When you share a dashboard, widgets that use PromQL (Prometheus Query Language) queries are not visible by default to people with whom you share the dashboard. If you want these people to see PromQL widgets, you must add permissions to the IAM role for dashboard sharing. + +###### To allow people that you share a dashboard with to see PromQL widgets + + 1. Open the CloudWatch console at [https://console.aws.amazon.com/cloudwatch/](https://console.aws.amazon.com/cloudwatch/). + + 2. In the navigation pane, choose **Dashboards**. + + 3. Choose the name of the shared dashboard. + + 4. Choose **Actions** , **Share dashboard**. + + 5. Under **Resources** , choose **IAM Role**. + + 6. In the IAM console, choose the displayed policy. + + 7. Choose **Edit policy** and add the following statement. + + { + "Effect": "Allow", + "Action": "cloudwatch:ListMetrics", + "Resource": "*" + } + + 8. Choose **Save Changes**. + + + +