Amazon CloudWatch
User Guide

Set IAM Permissions for SDK Metrics

To configure permissions so you can use SDK Metrics, you must create an IAM policy to allow the SDK Metrics process and attach it to the role or user that is attached to the EC2 instance running the CloudWatch agent.

  1. Open the IAM console at https://console.aws.amazon.com/iam/.

  2. In the navigation pane, choose Policies.

  3. Choose Create Policy, JSON.

  4. Enter the following inline policy into the content window. Ignore the warning about the non-supported action.

    { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "sdkmetrics:*" ], "Resource": "*" } ] }
  5. Name the policy AmazonSDKMetrics.

  6. Attach the policy to the IAM user or role that is attached to the EC2 instance that is running the CloudWatch agent.