---
sidebar_label: AWS CloudWatch
doc_id: a74eb712-cc0d-4ecb-b1d1-e61a4cf6d851
description: >-
  Configure AWS CloudWatch metrics collection with IAM roles for cross-account
  access and observability data.
keywords:
  - AWS CloudWatch
  - IAM roles
  - metrics configuration
  - cross-account access
  - observability
---

# AWS CloudWatch

AWS CloudWatch configuration

**Type**: `aws-cloudwatch-metrics-configuration`

**Properties**

|Name|Type|Description|Required|
|----|----|-----------|--------|
|[**setup**](#setup)|`object`|Access configuration<br/>|yes|

**Additional Properties:** not allowed  
**Example**

```json
{
    "setup": {
        "reader_role_arn": "arn:aws:iam::123456789012:role/reader-role",
        "reader_role_external_id": "external-id",
        "reader_intermediate_role": "arn:aws:iam::123456789012:role/reader-role",
        "reader_intermediate_role_external_id": "external-id"
    }
}
```

<a name="setup"></a>
## setup: Setup

Access configuration

**Properties**

|Name|Type|Description|Required|
|----|----|-----------|--------|
|**reader\_role\_arn**<br/>(Role ARN)|`string`|Main reader IAM role ARN than nullplatform assumes to collect logs, metrics, and observability data from your AWS account.<br/>Pattern: `^arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@\-_/]+$`<br/>|yes|
|**reader\_role\_external\_id**<br/>(Role external ID)|`string`|External ID required when assuming the main reader role, providing additional security for cross-account access.<br/>Pattern: `^[a-zA-Z0-9+=,.@\-_/]+$`<br/>|no|
|**reader\_intermediate\_role**<br/>(Intermediate role ARN)|`string`|Intermediate IAM role ARN used when direct assumption of the main reader role isn't possible for CloudWatch data collection.<br/>Pattern: `^arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@\-_/]+$`<br/>|no|
|**reader\_intermediate\_role\_external\_id**<br/>(Intermediate role external ID)|`string`|External ID for the intermediate role if additional security is required for role assumption.<br/>Pattern: `^[a-zA-Z0-9+=,.@\-_/]+$`<br/>|no|

**Example**

```json
{
    "reader_role_arn": "arn:aws:iam::123456789012:role/reader-role",
    "reader_role_external_id": "external-id",
    "reader_intermediate_role": "arn:aws:iam::123456789012:role/reader-role",
    "reader_intermediate_role_external_id": "external-id"
}
```