{"slug":"iam-aws-xray","cloud":"aws","service":"xray","title":"AWS X-Ray (IAM)","description":"AWS X-Ray helps developers analyze and debug distributed applications, such as those built using a microservices architecture, by providing end-to-end tracing and service maps.","category":"monitoring","common_permissions":["xray:GetTraceSummaries","xray:GetServiceGraph","xray:GetTraceGraph","xray:GetGroup","xray:GetGroups","xray:PutTraceSegments","xray:GetSamplingRules","xray:GetSamplingTargets"],"least_privilege_example":"{\n  \"Version\": \"2012-10-17\",\n  \"Statement\": [\n    {\n      \"Effect\": \"Allow\",\n      \"Action\": [\n        \"xray:GetTraceSummaries\",\n        \"xray:GetServiceGraph\",\n        \"xray:GetTraceGraph\",\n        \"xray:GetGroup\",\n        \"xray:GetGroups\",\n        \"xray:PutTraceSegments\",\n        \"xray:GetSamplingRules\",\n        \"xray:GetSamplingTargets\"\n      ],\n      \"Resource\": \"*\"\n    }\n  ]\n}","warnings":["Avoid xray:* — grants full control including delete/modify of groups, sampling rules, and encryption config","Avoid xray:PutEncryptionConfig — can change encryption settings, potentially breaking compliance"],"docs":"https://servicereference.us-east-1.amazonaws.com/v1/xray/xray.json","tags":["iam","aws"],"last_verified":"2026-06-14T00:00:00.000Z","next_check":"2026-12-11T00:00:00.000Z","created_at":"2026-06-14T04:51:39.646Z","updated_at":"2026-06-14T04:51:39.646Z"}