cusotm metrics from cwagent

Author: chpy04

.ebextensions/02_cloudwatch_agent.config

@@ -1,6 +1,6 @@
 files:
-  "/opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.json":
-    mode: "000644"
+  "/opt/aws/amazon-cloudwatch-agent/bin/config.json":
+    mode: "000600"
     owner: root
     group: root
     content: |
@@ -11,6 +11,10 @@ files:
         },
         "metrics": {
           "namespace": "CWAgent",
+          "append_dimensions": {
+            "AutoScalingGroupName": "${aws:AutoScalingGroupName}",
+            "InstanceId": "${aws:InstanceId}"
+          },
           "metrics_collected": {
             "mem": {
               "measurement": [
@@ -35,29 +39,10 @@ files:
                 "*"
               ]
             }
-          },
-          "append_dimensions": {
-            "AutoScalingGroupName": "${aws:AutoScalingGroupName}",
-            "InstanceId": "${aws:InstanceId}"
           }
         }
       }
 
-commands:
-  01_install_cloudwatch_agent:
-    command: |
-      if ! command -v amazon-cloudwatch-agent-ctl &> /dev/null; then
-        wget -q https://s3.amazonaws.com/amazoncloudwatch-agent/amazon_linux/amd64/latest/amazon-cloudwatch-agent.rpm
-        rpm -U ./amazon-cloudwatch-agent.rpm
-        rm -f ./amazon-cloudwatch-agent.rpm
-      fi
-    test: "[ ! -f /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl ]"
-
-  02_stop_cloudwatch_agent:
-    command: |
-      /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl \
-        -a fetch-config \
-        -m ec2 \
-        -c file:/opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.json \
-        -s
-    ignoreErrors: true
+container_commands:
+  start_cloudwatch_agent:
+    command: /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl -a append-config -m ec2 -s -c file:/opt/aws/amazon-cloudwatch-agent/bin/config.json

infrastructure/modules/iam/main.tf

@@ -163,6 +163,18 @@ resource "aws_iam_role_policy" "eb_ecr_access" {
   })
 }
 
+# Attach AWS managed policy for CloudWatch Agent
+# This policy includes permissions for:
+# - cloudwatch:PutMetricData
+# - ec2:DescribeVolumes, ec2:DescribeTags
+# - logs:* (CreateLogGroup, CreateLogStream, PutLogEvents, etc.)
+# - xray:* (for traces)
+# - ssm:GetParameter (for configs in Parameter Store)
+resource "aws_iam_role_policy_attachment" "eb_cloudwatch_agent" {
+  role       = aws_iam_role.eb_ec2_role.name
+  policy_arn = "arn:aws:iam::aws:policy/CloudWatchAgentServerPolicy"
+}
+
 # EC2 Instance Profile
 resource "aws_iam_instance_profile" "eb_ec2_profile" {
   name = "${var.project_name}-${var.environment}-eb-ec2-profile"

infrastructure/modules/monitoring/main.tf

@@ -27,6 +27,44 @@ resource "aws_cloudwatch_dashboard" "main" {
           }
         }
       },
+      # EC2 Memory Utilization (Custom Metric)
+      {
+        type = "metric"
+        properties = {
+          metrics = [
+            ["CWAgent", "MemoryUtilization", "AutoScalingGroupName", var.eb_autoscaling_group_name, { stat = "Average" }]
+          ]
+          period = 300
+          stat   = "Average"
+          region = var.aws_region
+          title  = "EC2 Memory Utilization (%)"
+          yAxis = {
+            left = {
+              min = 0
+              max = 100
+            }
+          }
+        }
+      },
+      # EC2 Disk Utilization (Custom Metric)
+      {
+        type = "metric"
+        properties = {
+          metrics = [
+            ["CWAgent", "DiskUtilization", "AutoScalingGroupName", var.eb_autoscaling_group_name, { stat = "Average" }]
+          ]
+          period = 300
+          stat   = "Average"
+          region = var.aws_region
+          title  = "EC2 Disk Utilization (%)"
+          yAxis = {
+            left = {
+              min = 0
+              max = 100
+            }
+          }
+        }
+      },
       {
         type = "metric"
         properties = {