# Pre requisites

- Connectivity to the AWS API

The plugin is a binary that contains the packaged dependencies, so no dependencies need to be installed in order to use it.

- Permissions

To make requests through the API, the account used for authentication during execution requires certain permissions (these will depend on the queries used and the resources being accessed).

[![image-1687446666111.png](https://pandorafms.com/guides/public/uploads/images/gallery/2023-06/scaled-1680-/image-1687446666111.png)](https://pandorafms.com/guides/public/uploads/images/gallery/2023-06/image-1687446666111.png)

<div id="bkmrk-billing-%28read%29">Billing (read)</div><div id="bkmrk-cloudwatch-%28list%2Crea">CloudWatch (list,read)</div><div id="bkmrk-cost-explorer-servic">Cost Explorer Service (Full access)</div><div id="bkmrk-ec2-%28full-read%2C-limi">EC2 (full read, limited: list)</div><div id="bkmrk--0"></div><span style="text-decoration: underline;">Permission assignment</span>

Create a policy in JSON like the following:

```
{
   "Version": "2012-10-17",
   "Statement": [
       {
           "Sid": "VisualEditor0",
           "Effect": "Allow",
           "Action": [
  			   "ec2:DescribeInstances",
               "ec2:DescribeVolumes",
               "aws-portal:ViewBilling",
               "cloudwatch:GetMetricStatistics",
               "ec2:DescribeAddresses",
               "ce:GetCostAndUsage",
               "ce:GetTags"
           ],
           "Resource": "*"
       }
   ]
}
```

The above policy must be assigned to a new user.

[![image-1687445953019.png](https://pandorafms.com/guides/public/uploads/images/gallery/2023-06/scaled-1680-/image-1687445953019.png)](https://pandorafms.com/guides/public/uploads/images/gallery/2023-06/image-1687445953019.png)

<div id="bkmrk-el-usuario-que-cuent"><div><div>Users with these permissions will be able to access AWS EC2 monitoring through this plugin.</div></div></div><div id="bkmrk--2"></div><div id="bkmrk--3"></div><div id="bkmrk--4"></div><div id="bkmrk--5"></div><p class="callout info">To obtain advanced statistics for EC2 instances, detailed monitoring must be enabled for the specific instance. This is done from the instance menu in AWS.  
  
**Actions -&gt; Monitoring and troubleshooting -&gt; Manage detailed monitoring -&gt; Enable**  
</p>