cloudwatch:PutProfileRecords

Write

cloudwatch:PutProfileRecords is a Write access-level action in the cloudwatch service. Grants permission to ingest CloudWatch application profiling data. This action is unrelated to CloudWatch access profiles (GetAccessProfile and related actions)

Resource types

ARNs that cloudwatch:PutProfileRecords can be scoped to in an IAM policy.

arn:${Partition}:cloudwatch:${Region}:${Account}:dataset/${DatasetId}
dataset

Condition keys

Keys you can use in the Condition block of a policy that grants cloudwatch:PutProfileRecords.

aws:ResourceTag/${TagKey} String

Filters access by tags associated with the resource

Example IAM policy

A minimal policy that allows cloudwatch:PutProfileRecords. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowCloudwatchPutProfileRecords",
      "Effect": "Allow",
      "Action": "cloudwatch:PutProfileRecords",
      "Resource": "*"
    }
  ]
}

Related actions in cloudwatch

cloudwatch:AssumeAccessProfile Permissions management cloudwatch:BatchGetServiceLevelIndicatorReport Read cloudwatch:BatchGetServiceLevelObjectiveBudgetReport Read cloudwatch:CallWithBearerToken Write cloudwatch:CreateAccessGrant Permissions management cloudwatch:CreateAccessProfile Permissions management cloudwatch:CreateAlert Write cloudwatch:CreateDomain Write cloudwatch:CreateDomainAccessGrantForOrganization Permissions management cloudwatch:CreateDomainForOrganization Write cloudwatch:CreateIngestionEndpoint Write cloudwatch:CreateIntegration Write

View all cloudwatch actions →