AWS X-Ray (IAM)

AWSxraymonitoring

AWS X-Ray helps developers analyze and debug distributed applications, such as those built using a microservices architecture, by providing end-to-end tracing and service maps.

iamaws

docs ↗

Permissions

Actions in this service

xray:GetTraceSummaries

xray:GetServiceGraph

xray:GetTraceGraph

xray:GetGroup

xray:GetGroups

xray:PutTraceSegments

xray:GetSamplingRules

xray:GetSamplingTargets

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "xray:GetTraceSummaries", "xray:GetServiceGraph", "xray:GetTraceGraph", "xray:GetGroup", "xray:GetGroups", "xray:PutTraceSegments", "xray:GetSamplingRules", "xray:GetSamplingTargets" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid xray:* — grants full control including delete/modify of groups, sampling rules, and encryption config

Avoid xray:PutEncryptionConfig — can change encryption settings, potentially breaking compliance

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/xray/xray.json ↗