Step 5 - Create IAM Monitor Policy
- Click Services and select IAM (Identity Access Management).
- Select Policies and click Create Policy.
- Click the JSON tab.
- Copy and paste the policy information.
{ "Statement": [ { "Sid": "VisualEditor0", "Effect": "Allow", "Action": [ "sqs:ChangeMessageVisibility", "sqs:ReceiveMessage", "sqs:DeleteMessage", "sqs:GetQueueUrl" ], "Resource": [ "<<Lookout Monitoring Queue ARN>>" ] }, { "Sid": "VisualEditor1", "Effect": "Allow", "Action": [ "s3:GetBucketAcl", "s3:GetBucketLocation", "s3:GetObject", "s3:ListAllMyBuckets", "s3:ListBucket", "s3:PutBucketAcl" ], "Resource": [ "<< List of s3 bucket arns to monitor or arn:aws:s3:::* >> " ] }, { "Sid": "VisualEditor3", "Effect": "Allow", "Action": [ "iam:ListGroupsForUser", "iam:ListUsers", "iam:ListGroups", "iam:GetUser", "iam:GetGroup" ], "Resource": "*"}
]
"Version": "2012-10-17" } - Click Review Policy at the lower right portion of the screen.
- Give the policy the name lookout-aws-monitor and click Create Policy.
