iam-policy-cloudwatch.tf

/**
 * Copyright (C) 2018-2020 Expedia, Inc.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 */

resource "aws_iam_role_policy" "cloudwatch_for_hms_readonly" {
  name = "cloudwatch"
  role = aws_iam_role.apiary_hms_readonly.id

  policy = <<EOF
{
     "Version": "2012-10-17",
     "Statement": [
         {
             "Effect": "Allow",
             "Action": [
                 "cloudwatch:PutMetricData",
                 "cloudwatch:GetMetricStatistics",
                 "cloudwatch:ListMetrics",
                 "ec2:DescribeTags"
             ],
             "Resource": "*"
         }
     ]
 }
EOF
}

resource "aws_iam_role_policy" "cloudwatch_for_hms_readwrite" {
  name = "cloudwatch"
  role = aws_iam_role.apiary_hms_readwrite.id

  policy = <<EOF
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "cloudwatch:PutMetricData",
                "cloudwatch:GetMetricStatistics",
                "cloudwatch:ListMetrics",
                "ec2:DescribeTags"
            ],
            "Resource": "*"
        }
    ]
}
EOF
}