Skip to content

Commit

Permalink
Merge pull request #1219 from miztch/docs/aws-ec2-ebs-iam-policy
Browse files Browse the repository at this point in the history
[plugin-aws-ec2-ebs] add actions to README need to be allowed in the iam policy
  • Loading branch information
yohfee committed Sep 3, 2024
2 parents 6066f72 + 598e031 commit 409a09a
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion mackerel-plugin-aws-ec2-ebs/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,12 @@ mackerel-plugin-aws-ec2-ebs [-instance-id=<id>] [-region=<aws-region>] [-access-
* you can set keys by environment variables: `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY` (see https://github.com/aws/aws-sdk-go#configuring-credentials)

## AWS IAM Policy
the credential provided manually or fetched automatically with IAM Role, should have the policy that includes an action, `cloudwatch:GetMetricStatistics` and `ec2:DescribeVolumes`
the credential provided manually or fetched automatically with IAM Role, should have the policy that allows actions below.

* `cloudwatch:GetMetricStatistics`
* `ec2:DescribeInstanceTypes`
* `ec2:DescribeInstances`
* `ec2:DescribeVolumes`

## Example of mackerel-agent.conf

Expand Down

0 comments on commit 409a09a

Please sign in to comment.