feat(observability): enable CloudWatch Transaction Search and tighten AgentCore IAM

↗ view on GitHub · Jason Lee · 2026-05-15 · 7b65f67e

- Split CloudWatchLogs policy into three statements scoped to log-group,
  log-stream, and describe-all per AWS docs (removes over-broad log-group:* wildcard)
- Add CfnResourcePolicy granting xray.amazonaws.com write access to aws/spans
  and /aws/application-signals/data log groups
- Add CfnTransactionSearchConfig at 5% indexing for representative trace sampling
Repository dropthejase/louis
Author Jason Lee <12leeejk2@gmail.com>
Authored
Parents 8161f5c0
Stats 1 file changed , +51 , -2
Part of CloudWatch metrics per status code, Transaction Search, README section

Capture this commit into my fork

Download a Markdown prompt that tells Claude how to port this exact commit into your working tree. Run it via claude -p < capture-commit-7b65f67e.md from inside the repo you want the change in.

⬇ Download capture-commit-7b65f67e.md