From 8d5a4c7f9847a9ec82c2d3d53cdf060dfc97ccce Mon Sep 17 00:00:00 2001
From: "mintlify[bot]" <109931778+mintlify[bot]@users.noreply.github.com>
Date: Tue, 9 Jun 2026 17:03:24 +0000
Subject: [PATCH] docs: add CloudWatch observability permissions to
 porter-manager policy

---
 snippets/aws-permissions.mdx | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/snippets/aws-permissions.mdx b/snippets/aws-permissions.mdx
index 46ff491e..2acdbeaf 100644
--- a/snippets/aws-permissions.mdx
+++ b/snippets/aws-permissions.mdx
@@ -573,6 +573,20 @@ export const awsPermissions = {
         "Effect": "Allow",
         "Resource": "*",
         "Sid": "AmazonEKSWorkerNodePolicy"
+      },
+      {
+        "Action": [
+          "cloudwatch:DeleteAlarms",
+          "cloudwatch:DescribeAlarms",
+          "cloudwatch:GetMetricData",
+          "cloudwatch:GetMetricStatistics",
+          "cloudwatch:PutMetricAlarm",
+          "cloudwatch:TagResource",
+          "logs:DescribeLogGroups"
+        ],
+        "Effect": "Allow",
+        "Resource": "*",
+        "Sid": "CloudWatchObservability"
       }
     ],
     "Version": "2012-10-17"