View a markdown version of this page

Using resource tags for telemetry - Amazon CloudWatch
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Using resource tags for telemetry

Once you have enabled resource tags for telemetry, you can leverage this enriched data to create powerful monitoring solutions that scale with your infrastructure. Use tag-based queries to group and filter metrics across multiple resources, create dynamic alarms that automatically adapt to resource changes, and gain insights into your Amazon environment organized by meaningful business or operational categories. This approach enables you to monitor resources by team, environment, application, or any other tagging strategy you use in your organization.

  • Creating tag-based Metrics Insights queries – After you enable resource tags for telemetry in your account, you can create tag-based Metrics Insights queries to discover and visualize your Amazon infrastructure metrics by tag. Example queries using tags can be seen in the CloudWatch Metrics Insights query builder documentation. Monitoring accounts can also make tag-based queries for metrics in source accounts which have enabled resource tags on their telemetry.

  • Creating tag-based CloudWatch alarms – After you enable resource tags for telemetry in your account, you can create CloudWatch alarms on tag-based Metrics Insights queries to alert on your Amazon infrastructure metrics by tag. Example alarms using tag-based queries can be seen in the CloudWatch Metric Insights alarms documentation.

Supported Amazon infrastructure metrics

The list below displays the Amazon CloudFormation resource that support resource tags for telemetry enrichment in CloudWatch. When you enable resource tags for telemetry, CloudWatch can enrich metrics from these services with their associated resource tags.

  • Amazon::ApiGatewayV2::Api

  • Amazon::AppSync::GraphQLApi

  • Amazon::Athena::CapacityReservation

  • Amazon::Athena::WorkGroup

  • Amazon::AutoScaling::AutoScalingGroup

  • Amazon::Backup::BackupVault

  • Amazon::CloudFront::Distribution

  • Amazon::CloudWatch::MetricStream

  • Amazon::Cognito::UserPool

  • Amazon::Connect::Instance

  • Amazon::DataSync::Agent

  • Amazon::DataSync::Task

  • Amazon::DocDB::DBCluster

  • Amazon::DocDB::DBInstance

  • Amazon::DocDBElastic::Cluster

  • Amazon::DynamoDB::GlobalTable

  • Amazon::DynamoDB::Table

  • Amazon::EC2::CapacityReservation

  • Amazon::EC2::Host

  • Amazon::EC2::Instance

  • Amazon::EC2::NatGateway

  • Amazon::EC2::TransitGateway

  • Amazon::EC2::VPC

  • Amazon::EC2::VPNConnection

  • Amazon::EC2::Volume

  • Amazon::ECS::Cluster

  • Amazon::ECS::Service

  • Amazon::EFS::FileSystem

  • Amazon::EKS::Cluster

  • Amazon::EMR::Cluster

  • Amazon::ElastiCache::CacheCluster

  • Amazon::ElastiCache::ReplicationGroup

  • Amazon::ElasticLoadBalancing::LoadBalancer

  • Amazon::ElasticLoadBalancingV2::LoadBalancer

  • Amazon::ElasticLoadBalancingV2::TargetGroup

  • Amazon::Events::Rule

  • Amazon::FSx::FileSystem

  • Amazon::Glue::Job

  • Amazon::IVSChat::LoggingConfiguration

  • Amazon::IoT::CACertificate

  • Amazon::IoT::ScheduledAudit

  • Amazon::IoT::SecurityProfile

  • Amazon::IoT::TopicRule

  • Amazon::KMS::Key

  • Amazon::Kinesis::Stream

  • Amazon::KinesisAnalyticsV2::Application

  • Amazon::KinesisFirehose::DeliveryStream

  • Amazon::Lambda::Function

  • Amazon::M2::Application

  • Amazon::MediaTailor::Channel

  • Amazon::Neptune::DBCluster

  • Amazon::Neptune::DBInstance

  • Amazon::NetworkFirewall::Firewall

  • Amazon::Pinpoint::App

  • Amazon::Pipes::Pipe

  • Amazon::RDS::DBCluster

  • Amazon::RDS::DBInstance

  • Amazon::RUM::AppMonitor

  • Amazon::Redshift::Cluster

  • Amazon::RedshiftServerless::Namespace

  • Amazon::RedshiftServerless::Workgroup

  • Amazon::Route53::HealthCheck

  • Amazon::S3::Bucket

  • Amazon::SNS::Topic

  • Amazon::SQS::Queue

  • Amazon::SageMaker::Endpoint

  • Amazon::SageMaker::InferenceComponent

  • Amazon::Synthetics::Canary

  • Amazon::Transfer::Connector

  • Amazon::Transfer::Server

  • Amazon::VpcLattice::Service