fix(ec2): add clooudwatch permissions required for metrics monitoring

This commit is contained in:
Michele Cereda
2025-12-19 10:02:22 +01:00
parent e4b35e88c3
commit f816ee7e13

View File

@@ -175,6 +175,25 @@ Refer [How can I send memory and disk metrics from my EC2 instances to CloudWatc
> Make sure the instance the permissions it needs to publish extra metrics.<br/>
> Consider assigning it the AWS-managed `CloudWatchAgentServerPolicy` IAM policy or similar permissions.
>
> <details style='padding: 0 0 1rem 1rem'>
>
> ```json
> {
> Version: "2012-10-17",
> Statement: [{
> Effect: "Allow",
> Action: [
> "ec2:DescribeTags",
> "ec2:DescribeVolumes",
> "cloudwatch:PutMetricData"
> ],
> Resource: "*"
> }]
> }
> ```
>
> </details>
CloudWatch agent's logs are saved by default to `/opt/aws/amazon-cloudwatch-agent/logs/amazon-cloudwatch-agent.log`.