Using resource tags for telemetry
Once you have enabled resource tags for telemetry, you can leverage this enriched data to create powerful monitoring solutions that scale with your infrastructure. Use tag-based queries to group and filter metrics across multiple resources, create dynamic alarms that automatically adapt to resource changes, and gain insights into your Amazon environment organized by meaningful business or operational categories. This approach enables you to monitor resources by team, environment, application, or any other tagging strategy you use in your organization.
Creating tag-based Metrics Insights queries – After you enable resource tags for telemetry in your account, you can create tag-based Metrics Insights queries to discover and visualize your Amazon infrastructure metrics by tag. Example queries using tags can be seen in the CloudWatch Metrics Insights query builder documentation. Monitoring accounts can also make tag-based queries for metrics in source accounts which have enabled resource tags on their telemetry.
Creating tag-based CloudWatch alarms – After you enable resource tags for telemetry in your account, you can create CloudWatch alarms on tag-based Metrics Insights queries to alert on your Amazon infrastructure metrics by tag. Example alarms using tag-based queries can be seen in the CloudWatch Metric Insights alarms documentation.
Supported Amazon infrastructure metrics
The list below displays the Amazon CloudFormation resource that support resource tags for telemetry enrichment in CloudWatch. When you enable resource tags for telemetry, CloudWatch can enrich metrics from these services with their associated resource tags.
Amazon::ApiGatewayV2::Api
Amazon::AppSync::GraphQLApi
Amazon::Athena::CapacityReservation
Amazon::Athena::WorkGroup
Amazon::AutoScaling::AutoScalingGroup
Amazon::Backup::BackupVault
Amazon::CloudFront::Distribution
Amazon::CloudWatch::MetricStream
Amazon::Cognito::UserPool
Amazon::Connect::Instance
Amazon::DataSync::Agent
Amazon::DataSync::Task
Amazon::DocDB::DBCluster
Amazon::DocDB::DBInstance
Amazon::DocDBElastic::Cluster
Amazon::DynamoDB::GlobalTable
Amazon::DynamoDB::Table
Amazon::EC2::CapacityReservation
Amazon::EC2::Host
Amazon::EC2::Instance
Amazon::EC2::NatGateway
Amazon::EC2::TransitGateway
Amazon::EC2::VPC
Amazon::EC2::VPNConnection
Amazon::EC2::Volume
Amazon::ECS::Cluster
Amazon::ECS::Service
Amazon::EFS::FileSystem
Amazon::EKS::Cluster
Amazon::EMR::Cluster
Amazon::ElastiCache::CacheCluster
Amazon::ElastiCache::ReplicationGroup
Amazon::ElasticLoadBalancing::LoadBalancer
Amazon::ElasticLoadBalancingV2::LoadBalancer
Amazon::ElasticLoadBalancingV2::TargetGroup
Amazon::Events::Rule
Amazon::FSx::FileSystem
Amazon::Glue::Job
Amazon::IVSChat::LoggingConfiguration
Amazon::IoT::CACertificate
Amazon::IoT::ScheduledAudit
Amazon::IoT::SecurityProfile
Amazon::IoT::TopicRule
Amazon::KMS::Key
Amazon::Kinesis::Stream
Amazon::KinesisAnalyticsV2::Application
Amazon::KinesisFirehose::DeliveryStream
Amazon::Lambda::Function
Amazon::M2::Application
Amazon::MediaTailor::Channel
Amazon::Neptune::DBCluster
Amazon::Neptune::DBInstance
Amazon::NetworkFirewall::Firewall
Amazon::Pinpoint::App
Amazon::Pipes::Pipe
Amazon::RDS::DBCluster
Amazon::RDS::DBInstance
Amazon::RUM::AppMonitor
Amazon::Redshift::Cluster
Amazon::RedshiftServerless::Namespace
Amazon::RedshiftServerless::Workgroup
Amazon::Route53::HealthCheck
Amazon::S3::Bucket
Amazon::SNS::Topic
Amazon::SQS::Queue
Amazon::SageMaker::Endpoint
Amazon::SageMaker::InferenceComponent
Amazon::Synthetics::Canary
Amazon::Transfer::Connector
Amazon::Transfer::Server
Amazon::VpcLattice::Service