CloudWatch integration | Flomation Support

00Overview

Publish custom metrics and act on them from a flow — create or update metric and composite alarms, enable or disable their actions, and set an alarm's state to test what it triggers. Query metric statistics and math expressions, render a metric graph to a PNG image, and build or replace CloudWatch dashboards. Manage anomaly detectors, metric streams to Kinesis Data Firehose, and resource tags, all on a schedule, on approval, or in response to something happening elsewhere in your stack.

Every field below is exactly what you see in the Flomation editor. Fields marked ● live picker let you choose from a list pulled live from your account — no IDs to look up.

01Connecting CloudWatch

Choose how to authenticate with the Authentication dropdown: Access Keys uses your own IAM user's keys; Assume Role (cross-account) lets Flomation assume a role in your account; Managed Role (Credential) selects a pre-configured AWS credential managed inside Flomation.
For Access Keys, open the AWS console IAM → Users, create or pick a user, and attach a CloudWatch policy such as CloudWatchFullAccess (or CloudWatchReadOnlyAccess for read-only flows). On the user's Security credentials tab choose Create access key, then paste the values into AWS Access Key and AWS Secret Key — add a Session Token (optional) only when you are using temporary STS credentials.
For Assume Role (cross-account), create an IAM role in your account carrying the CloudWatch permissions you need and set its trust policy to allow Flomation's AWS principal to call sts:AssumeRole. Paste the role's ARN into Role ARN to Assume, and if the trust policy requires one, fill Assume Role External ID (optional) to match.
For Managed Role (Credential), simply select a pre-configured AWS Role Credential that your Flomation administrator has already set up — no keys are entered on the node.
Set the Region to the AWS Region your metrics and alarms live in (e.g. eu-west-2), store your secret as a Flomation environment secret (e.g. cloudwatch_secret), and pick it in the node's AWS Secret Key field.

Field	Type		Details
Authentication	`string`	Required	Access Keys, Assume Role (cross-account), Managed Role (Credential)
AWS Access Key	`secret`	Required
AWS Secret Key	`secret`	Required
Session Token (optional)	`secret`
AWS Role Credential	`credential`	Required

Good to know

Pick an Environment on your flow (Flow Settings → Environment) so the secret resolves. Secret fields never show the value — they reference ${secrets.your_secret}.

02Delete

AWS CloudWatch Delete Alarms

aws/cloudwatch/delete_alarms · Action

Delete one or more CloudWatch alarms by name.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Alarm Names (comma-separated)	`string`	Required	high-cpu,high-mem

Returns: tool_result, deleted_count

AWS CloudWatch Delete Anomaly Detector

aws/cloudwatch/delete_anomaly_detector · Action

Delete a single-metric anomaly detection model.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Namespace	`string`	Required	AWS/EC2
Metric Name	`string`	Required	CPUUtilization
Statistic	`string`	Required	Average — choices: Average, Sum, Minimum, Maximum, Sample Count
Dimensions	`key_value_array`		Add a Name and Value per dimension

Returns: tool_result

AWS CloudWatch Delete Dashboards

aws/cloudwatch/delete_dashboards · Action

Delete one or more CloudWatch dashboards by name.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Dashboard Names (comma-separated)	`string`	Required	dash-a, dash-b

Returns: tool_result

AWS CloudWatch Delete Metric Stream

aws/cloudwatch/delete_metric_stream · Action

Delete a CloudWatch metric stream permanently.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Stream Name	`string`	Required	my-metric-stream

Returns: tool_result, name

03Describe

AWS CloudWatch Describe Alarm History

aws/cloudwatch/describe_alarm_history · Action

Retrieve the state change and configuration history for alarms.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Alarm Name (optional)	`string`		high-cpu
History Item Type (optional)	`string`		choices: Configuration Update, State Update, Action
Start Date (RFC3339, optional)	`string`		2026-07-22T00:00:00Z
End Date (RFC3339, optional)	`string`		2026-07-22T23:59:59Z

Returns: tool_result, history, count

AWS CloudWatch Describe Alarms

aws/cloudwatch/describe_alarms · Action

List metric alarms with their current state and thresholds.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Alarm Names (comma-separated, optional)	`string`		high-cpu,high-mem
State (optional)	`string`		choices: OK, ALARM, INSUFFICIENT_DATA
Alarm Name Prefix (optional)	`string`		prod-

Returns: tool_result, alarms, count

AWS CloudWatch Describe Alarms For Metric

aws/cloudwatch/describe_alarms_for_metric · Action

List the alarms associated with a specific metric.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Namespace	`string`	Required	AWS/EC2
Metric Name	`string`	Required	CPUUtilization
Dimensions	`key_value_array`		Add a Name and Value per dimension
Statistic	`string`		choices: Average, Sum, Minimum, Maximum, Sample Count
Period (seconds)	`integer`		300

Returns: tool_result, alarms, count

AWS CloudWatch Describe Anomaly Detectors

aws/cloudwatch/describe_anomaly_detectors · Action

List anomaly detection models, filtered by namespace/metric.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Namespace (optional)	`string`		AWS/EC2
Metric Name (optional)	`string`		CPUUtilization

Returns: tool_result, detectors, count

04Disable

AWS CloudWatch Disable Alarm Actions

aws/cloudwatch/disable_alarm_actions · Action

Disable the configured actions for one or more alarms.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Alarm Names (comma-separated)	`string`	Required	high-cpu,high-mem

Returns: tool_result, alarm_count

05Enable

AWS CloudWatch Enable Alarm Actions

aws/cloudwatch/enable_alarm_actions · Action

Enable the configured actions for one or more alarms.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Alarm Names (comma-separated)	`string`	Required	high-cpu,high-mem

Returns: tool_result, alarm_count

06Get

AWS CloudWatch Get Dashboard

aws/cloudwatch/get_dashboard · Action

Fetch a CloudWatch dashboard's widget layout JSON and ARN by name.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Dashboard Name	`string`	Required	my-dashboard

Returns: tool_result, dashboard_body, dashboard_arn

AWS CloudWatch Get Metric Data

aws/cloudwatch/get_metric_data · Action

Fetch metric data or math expression results via metric data queries.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Metric Data Queries (JSON array)	`string`	Required	[{"Id":"m1","MetricStat":{"Metric":{"Namespace":"AWS/EC2","MetricName":"CPUUtilization"},"Period":300,"Stat":"Average"}}]
Start Time (RFC3339)	`string`	Required	2026-07-22T00:00:00Z
End Time (RFC3339)	`string`	Required	2026-07-22T01:00:00Z

Returns: tool_result, results, count

AWS CloudWatch Get Metric Statistics

aws/cloudwatch/get_metric_statistics · Action

Retrieve aggregated statistics for a metric over a time range.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Namespace	`string`	Required	AWS/EC2
Metric Name	`string`	Required	CPUUtilization
Dimensions	`key_value_array`		Add a Name and Value per dimension
Start Time (RFC3339)	`string`	Required	2026-07-22T00:00:00Z
End Time (RFC3339)	`string`	Required	2026-07-22T01:00:00Z
Period (seconds)	`integer`	Required	300
Statistics (comma-separated)	`string`	Required	Average,Maximum

Returns: tool_result, datapoints, count

AWS CloudWatch Get Metric Stream

aws/cloudwatch/get_metric_stream · Action

Retrieve the configuration and state of a CloudWatch metric stream.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Stream Name	`string`	Required	my-metric-stream

Returns: tool_result, arn, state, firehose_arn, output_format

AWS CloudWatch Get Metric Widget Image

aws/cloudwatch/get_metric_widget_image · Action

Render a metric-widget definition into a PNG graph image.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Metric Widget (JSON)	`string`	Required	{"metrics":[["AWS/EC2","CPUUtilization"]]}
Output Format	`string`		png

Returns: tool_result, image_base64

07List

AWS CloudWatch List Dashboards

aws/cloudwatch/list_dashboards · Action

List CloudWatch dashboards, optionally filtered by a name prefix.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Dashboard Name Prefix (optional)	`string`		prod-

Returns: tool_result, dashboards, count

AWS CloudWatch List Metric Streams

aws/cloudwatch/list_metric_streams · Action

List the CloudWatch metric streams in an account and Region.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy

Returns: tool_result, streams, count

AWS CloudWatch List Metrics

aws/cloudwatch/list_metrics · Action

List available CloudWatch metrics, optionally filtered.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Namespace (optional)	`string`		AWS/EC2
Metric Name (optional)	`string`		CPUUtilization
Dimension Filters	`key_value_array`		Add a Name and (optional) Value per filter

Returns: tool_result, metrics, count

AWS CloudWatch List Tags For Resource

aws/cloudwatch/list_tags_for_resource · Action

List the tags associated with a CloudWatch resource.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Resource ARN	`string`	Required	arn:aws:cloudwatch:eu-west-2:123456789012:alarm:high-cpu

Returns: tool_result, tags

08Put

AWS CloudWatch Put Anomaly Detector

aws/cloudwatch/put_anomaly_detector · Action

Create a single-metric anomaly detection model.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Namespace	`string`	Required	AWS/EC2
Metric Name	`string`	Required	CPUUtilization
Statistic	`string`	Required	Average — choices: Average, Sum, Minimum, Maximum, Sample Count
Dimensions	`key_value_array`		Add a Name and Value per dimension

Returns: tool_result

AWS CloudWatch Put Composite Alarm

aws/cloudwatch/put_composite_alarm · Action

Create or update a composite alarm from a rule over other alarms.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Alarm Name	`string`	Required	service-degraded
Alarm Rule	`string`	Required	ALARM("high-cpu") OR ALARM("high-mem")
Alarm Actions (comma-separated ARNs)	`string`		arn:aws:sns:eu-west-2:123456789012:alerts
Description (optional)	`string`

Returns: tool_result, alarm_name

AWS CloudWatch Put Dashboard

aws/cloudwatch/put_dashboard · Action

Create or replace a CloudWatch dashboard from its widget layout JSON.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Dashboard Name	`string`	Required	my-dashboard
Dashboard Body (JSON)	`string`	Required	{"widgets":[...]}

Returns: tool_result, validation_messages

AWS CloudWatch Put Metric Alarm

aws/cloudwatch/put_metric_alarm · Action

Create or update a metric alarm on a threshold comparison.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Alarm Name	`string`	Required	high-cpu
Comparison Operator	`string`	Required	choices: Greater Than Threshold, Greater Than Or Equal To Threshold, Less Than Threshold, Less Than Or Equal To Threshold
Evaluation Periods	`integer`	Required	1
Metric Name	`string`		CPUUtilization
Namespace	`string`		AWS/EC2
Period (seconds)	`integer`		300
Statistic	`string`		choices: Average, Sum, Minimum, Maximum, Sample Count
Threshold	`string`	Required	80
Alarm Actions (comma-separated ARNs)	`string`		arn:aws:sns:eu-west-2:123456789012:alerts
Dimensions	`key_value_array`		Add a Name and Value per dimension
Description (optional)	`string`
Treat Missing Data (optional)	`string`		missing \| notBreaching \| breaching \| ignore

Returns: tool_result, alarm_name

AWS CloudWatch Put Metric Data

aws/cloudwatch/put_metric_data · Action

Publish one or more custom metric data points to CloudWatch.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Namespace	`string`	Required	MyApp/Orders
Metric Name	`string`		OrdersProcessed
Value	`string`		1
Unit	`string`		choices: None, Seconds, Bytes, Percent, Count, Count/Second, Milliseconds
Dimensions	`key_value_array`		Add a Name and Value per dimension
Metric Data (JSON array, overrides simple fields)	`string`		[{"MetricName":"Orders","Value":1,"Unit":"Count"}]

Returns: tool_result, datapoint_count

AWS CloudWatch Put Metric Stream

aws/cloudwatch/put_metric_stream · Action

Create or update a metric stream delivering metrics to Kinesis Data Firehose.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Stream Name	`string`	Required	my-metric-stream
Firehose ARN	`string`	Required	arn:aws:firehose:eu-west-2:123456789012:deliverystream/my-stream
IAM Role ARN	`string`	Required	arn:aws:iam::123456789012:role/MetricStreamRole
Output Format	`string`	Required	choices: JSON, OpenTelemetry 0.7, OpenTelemetry 1.0
Include Filters (JSON array, optional)	`string`		[{"namespace":"AWS/EC2","metric_names":["CPUUtilization"]}]
Exclude Filters (JSON array, optional)	`string`		[{"namespace":"AWS/Logs"}]

Returns: tool_result, arn

09Set

AWS CloudWatch Set Alarm State

aws/cloudwatch/set_alarm_state · Action

Temporarily set an alarm's state to test its actions.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Alarm Name	`string`	Required	high-cpu
State	`string`	Required	choices: OK, ALARM, INSUFFICIENT_DATA
State Reason	`string`	Required	Manual test

Returns: tool_result, alarm_name

10Start

AWS CloudWatch Start Metric Streams

aws/cloudwatch/start_metric_streams · Action

Start streaming for one or more CloudWatch metric streams.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Stream Names (comma-separated)	`string`	Required	stream-a, stream-b

Returns: tool_result, count

11Stop

AWS CloudWatch Stop Metric Streams

aws/cloudwatch/stop_metric_streams · Action

Stop streaming for one or more CloudWatch metric streams.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Stream Names (comma-separated)	`string`	Required	stream-a, stream-b

Returns: tool_result, count

12Tag

AWS CloudWatch Tag Resource

aws/cloudwatch/tag_resource · Action

Add key-value tags to a CloudWatch resource (alarm, etc).

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Resource ARN	`string`	Required	arn:aws:cloudwatch:eu-west-2:123456789012:alarm:high-cpu
Tags	`key_value_array`		Add a Key and Value per tag

Returns: tool_result, resource_arn

13Untag

AWS CloudWatch Untag Resource

aws/cloudwatch/untag_resource · Action

Remove tags (by key) from a CloudWatch resource.

Field	Type		Details
Region	`string`	Required	eu-west-2
Role ARN to Assume	`string`	Required	arn:aws:iam::<your-account>:role/FlomationAccess
Assume Role External ID (optional)	`string`		Must match the External ID in the role's trust policy
Resource ARN	`string`	Required	arn:aws:cloudwatch:eu-west-2:123456789012:alarm:high-cpu
Tag Keys (comma-separated)	`string`	Required	environment,team

Returns: tool_result, resource_arn

14Triggers

CloudWatch Alarm Trigger

trigger/cloudwatch_alarm · Trigger

Triggers a flow when a CloudWatch alarm changes state (OK, ALARM, INSUFFICIENT_DATA). Polls DescribeAlarms.

Field	Type		Details
Region	`string`	Required	eu-west-2
Alarm Names	`string`		Comma-separated; leave blank for all alarms (optional)
Fire On State	`string`		Any — choices: Any state change, ALARM, OK, INSUFFICIENT_DATA
Poll Interval	`string`		e.g. 60s, 5m

Returns: alarm_name, state_value, previous_state, state_reason, metric_name, namespace, timestamp, triggered_at

CloudWatch Logs Trigger

trigger/cloudwatch_logs · Trigger

Triggers a flow when log events match a filter pattern in a log group. Polls FilterLogEvents.

Field	Type		Details
Region	`string`	Required	eu-west-2
Log Group Name	`string`	Required	/aws/lambda/my-fn
Filter Pattern	`string`		e.g. ERROR (blank matches all events)
Poll Interval	`string`		e.g. 60s, 5m

Returns: log_group, log_stream, message, event_id, timestamp, triggered_at

CloudWatch Metric Threshold Trigger

trigger/cloudwatch_metric · Trigger

Triggers a flow when a CloudWatch metric crosses a threshold (edge-triggered). Polls GetMetricStatistics.

Field	Type		Details
Region	`string`	Required	eu-west-2
Namespace	`string`	Required	e.g. AWS/EC2
Metric Name	`string`	Required	e.g. CPUUtilization
Dimensions	`string`		Name=Value,Name2=Value2 (optional)
Statistic	`string`	Required	choices: Average, Sum, Minimum, Maximum, Sample Count
Period (seconds)	`integer`		e.g. 300
Comparison	`string`	Required	choices: Greater than, Greater than or equal, Less than, Less than or equal
Threshold	`string`	Required	e.g. 80
Poll Interval	`string`		e.g. 60s, 5m

Returns: namespace, metric_name, value, threshold, comparison, statistic, timestamp, triggered_at

15Notes & Limitations

Behaviours and constraints worth knowing before you build with these nodes.

CloudWatch alarms, metrics and metric streams are Region-scoped, so set Region to the Region the resources actually live in — a query against the wrong Region simply returns nothing rather than erroring.
The create-or-replace actions such as put_metric_alarm, put_composite_alarm and put_dashboard overwrite any existing resource of the same name in place, so reusing a name silently replaces its configuration instead of reporting a conflict.
Setting an alarm's state with Set Alarm State is only a temporary test override, which CloudWatch replaces automatically at the next metric evaluation.
Newly published custom metrics can take a few minutes to become queryable, so reading a metric immediately after publishing it may return no data points yet.
Get Metric Widget Image returns a rendered PNG image rather than numeric data, so wire it to a step that consumes an image (such as an email or file upload) rather than a data-processing step.