AWS CloudWatch integration with Elastic using Elastic Agent

Elastic Stack Beats
,
9

Hey @JypraGroup, if you're going to use CloudWatch metrics and logs. here's the IAM policy tailored to support both CloudWatch Metrics and Logs:

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "cloudwatch:GetMetricData",
                "cloudwatch:ListMetrics",
                "iam:ListAccountAliases",
                "ec2:DescribeRegions",
                "tag:GetResources",
                "logs:FilterLogEvents",
                "logs:DescribeLogGroups",
                "sts:GetCallerIdentity"
            ],
            "Resource": "*"
        }
    ]
}

I forgot to mention that Filebeat and Metricbeat [1] documentation lists the permissions required for each module (and then integration):

  1. The current version of the Elastic Agent orchestrates both Metricbeat and Filebeat behind the scenes to get its job done. This is going to change in future releases. ↩︎

1 Like