Pre requisites

Connectivity to the AWS API

The plugin is a binary that contains the packaged dependencies, so no dependencies need to be installed in order to use it.

Permissions

To make requests through the API, the account used for authentication during execution requires certain permissions (these will depend on the queries used and the resources being accessed).

Billing (read)

CloudWatch (list,read)

Cost Explorer Service (Full access)

EC2 (full read, limited: list)

Permission assignment

Create a policy in JSON like the following:

{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Sid": "VisualEditor0",
           "Effect": "Allow",
           "Action": [
  			   "ec2:DescribeInstances",
               "ec2:DescribeVolumes",
               "aws-portal:ViewBilling",
               "cloudwatch:GetMetricStatistics",
               "ec2:DescribeAddresses",
               "ce:GetCostAndUsage",
               "ce:GetTags"
           ],
           "Resource": "*"
       }
   ]
}

The above policy must be assigned to a new user.

Users with these permissions will be able to access AWS EC2 monitoring through this plugin.

To obtain advanced statistics for EC2 instances, detailed monitoring must be enabled for the specific instance. This is done from the instance menu in AWS.

Actions -> Monitoring and troubleshooting -> Manage detailed monitoring -> Enable