guestRoleArn

The ARN of the guest IAM role that is attached to the Amazon Cognito identity pool that is used to authorize the sending of data to RUM.

It is possible that an app monitor does not have a value for GuestRoleArn. For example, this can happen when you use the console to create an app monitor and you allow CloudWatch RUM to create a new identity pool for Authorization. In this case, GuestRoleArn is not present in the GetAppMonitor response because it is not stored by the service.

If this issue affects you, you can take one of the following steps:

• Use the Cloud Development Kit (CDK) to create an identity pool and the associated IAM role, and use that for your app monitor.

• Make a separate GetIdentityPoolRoles call to Amazon Cognito to retrieve the GuestRoleArn.