Temporary credentials in CloudWatch data source

The Grafana Assume Role authentication provider lets Grafana Cloud users of the CloudWatch data source authenticate with AWS without having to create and maintain long term AWS Users. Using the new assume role authentication method, you no longer have to rotate access and secret keys in your CloudWatch data source. Instead, Grafana Cloud users can create an identity access and management (IAM) role that has a trust relationship with Grafana’s AWS account; Grafana’s AWS account will then use AWS Secure Token Service (STS) to create temporary credentials to access the user’s AWS data.

To learn more, refer to the CloudWatch authentication documentation.