ResourcePolicy

Source: src/AWS/RUM/ResourcePolicy.ts

The resource-based policy of a CloudWatch RUM app monitor — controls which principals may send events to (rum:PutRumEvents) or read data from the app monitor. An app monitor has at most one.

Creating a Resource Policy

const monitor = yield* RUM.AppMonitor("SiteMonitor", {
  domain: "example.com",
});
const policy = yield* RUM.ResourcePolicy("SitePolicy", {
  appMonitorName: monitor.appMonitorName,
  policyDocument: monitor.appMonitorArn.map((arn) =>
    JSON.stringify({
      Version: "2012-10-17",
      Statement: [
        {
          Effect: "Allow",
          Principal: { AWS: "arn:aws:iam::123456789012:root" },
          Action: ["rum:PutRumEvents"],
          Resource: arn,
        },
      ],
    }),
  ),
});