CloudWatch Dashboard Sharing

Initial Setup

  1. Set up SSO for CloudWatch dashboard sharing

    1. When setting Identity Providers on the Cognito User Pool, choose SAML

    2. When prompted for a Metadata document

      1. Upload the IdP Metadata from for your User or Organization

    3. When prompted for the Provider name

      1. Input saml-to

  2. In Dashboard Sharing, select saml-to as the Identity Provider

  3. Go to the desired Dashboard in CloudWatch

    1. Click Actions then Share Dashboard

    2. Under Share all your account’s CloudWatch dashboards using single sign-on (SSO)

      1. Under Resources

        1. Make note of the Sharable Link (e.g.

        2. Navigate to the Cognito UserPoolIdentityProvider

          1. Make note of the User Pool ID (e.g. us-east-1_Q046sC47y)

          2. Under Make note of the Cognito Domain (e.g.

  4. Edit saml-to.yml in your configured repository and make the following changes:

    entityId: 'urn:amazon:cognito:sp:YOUR_USER_POOL_ID'
    acsUrl: 'YOUR_COGNITO_DOMAIN/saml2/idpresponse'
    nameIdFormat: email
  • Replace YOUR_DASHBOARD_SHAREABLE_LINK with the Shareable Link above

  • Replace YOUR_USER_POOL_ID with the User Pool ID above

  • Replace YOUR_COGNITO_DOMAIN with the Cognito Domain above

  • Replace YOUR_GITHUB_USER_ID with your GitHub Login

    • Add other GitHub users as-needed!

Opening the Dashboard

After installing the CLI, run the following command:

saml-to login my-dashboard

Which will open a browser window to the dashboard!

Last updated