The operations team can view the Amazon CloudWatch dashboard. So Operations Lead wants his team members to be able to create customized cross-account cross-region dashboards.
As a Sysops administrator, you have been assigned to create permission for each of the members of the operations team to create these dashboards.
Which of the following permission would suffice the requirements?

Answer options:

A.Create a custom policy having permission to cloudwatch:GetDashboard API.
B.Create a custom policy having permission to cloudwatch:ListDashboard API.
C.Create a custom policy having permission to cloudwatch:createDashboard API.
D.Create a custom policy having permission to cloudwatch:PutDashboard API.

Correct Answer: D
Cloudwatch:PutDashboard API is used for creating or modifying dashboards. Since the Operations Team can view dashboards, they already have permission for cloudwatch:GetDashboard and cloudwatch:ListDashboards. Additional Sysops administrator has to provide permission to cloudwatch:PutDashboard API to create customized cross-account cross-regions dashboards.
Options A & B are incorrect as with these APIs, users will only be able to view dashboards.
Option C is incorrect as this is an invalid API for creating dashboards.
For more information on creating dashboards with Amazon CloudWatch, refer to the following URL,
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Dashboards.html