亚马逊 cloudwatch 代理不工作

Question

I'm trying to add aws cloudwatch agent to see additional metrics using tutorial

A brief review of what I did:

1. Create AIM role and attach to EC2 instance doc (NOTE: I do not use Parameter Store just for communication between EC2 and cloudwatch)
2. Install Agent using s3 link
3. Create agent configuration file docs
4. Run agent using CLI dosc

But it still not working and in agent log, I see errors like

ec2tagger: Unable to initialize EC2 Instance Tags: +NoCredentialProviders: no valid providers in chain. Deprecated. For verbose messaging see aws.Config.CredentialsChainVerboseErrors

While googling I found not much related to cloudwath just only that in AIM role in 'Trust Relationship' config ec2 should be mentioned in service section and it is:

    {
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Principal": {
        "Service": "ec2.amazonaws.com"
      },
      "Action": "sts:AssumeRole"
    }
  ]
}

Any ideas, thanks??

Answer 1

"The first procedure creates the IAM role that you must attach to each Amazon EC2 instance that runs the CloudWatch agent. This role provides permissions for reading information from the instance and writing it to CloudWatch." in docs

please attach IAM role that you created to your ec2 instance first,it works for me

Answer 2

In my case the instance had an IAM role attached, but the role was missing the ec2:DescribeTags permission. Adding that fixed the problem.

Answer 3

The cloudwatch agent process that runs in the ec2 should be able to describe the tags of ec2. The permission required for that is ec2:DescribeTags .

Attaching instance role with the managed policy arn:aws:iam::aws:policy/CloudWatchAgentServerPolicy will resolve the problem.

Answer 4

检查 CloudWatch 代理服务是否正在运行（已启动）

Answer 5

I got the same issue, resolve by using below command, refresh routes

Import-Module C:\ProgramData\Amazon\EC2-Windows\Launch\Module\Ec2Launch.psm1; Add-Routes

Answer 6

通过从实例内部运行aws configure解决