AWS CloudWatch Logs Resource Policies

GPTKB entity

Statements (26)
Predicate Object
gptkbp:instanceOf AWS Service Feature
gptkbp:allows external AWS accounts to access logs
gptkbp:appliesTo log streams
log groups
gptkbp:canBe gptkb:AWS_CLI
gptkb:AWS_Management_Console
gptkb:AWS_SDKs
deleted
created
updated
gptkbp:capacity 5120 characters
gptkbp:documentation https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CrossAccountLogDataSharing.html
gptkbp:enables cross-account log sharing
access control for log groups
https://www.w3.org/2000/01/rdf-schema#label AWS CloudWatch Logs Resource Policies
gptkbp:partOf gptkb:Amazon_CloudWatch_Logs
gptkbp:relatedTo gptkb:AWS_Organizations
gptkb:AWS_Identity_and_Access_Management
CloudWatch Log Insights
gptkbp:supports JSON format
resource-based permissions
condition keys
wildcards in resource ARNs
gptkbp:uses IAM policy syntax
gptkbp:bfsParent gptkb:Amazon_CloudWatch_Logs
gptkbp:bfsLayer 6