Effective DevOps with AWS

Updating our CloudFormation template

Open the nodeserver-cf-template.py script.

After the first IAM policy, add the following MonitoringPolicy IAM policy. Simply add the following action to the statement:

t.add_resource(IAMPolicy( 
    "MonitoringPolicy", 
    PolicyName="AllowSendingDataForMonitoring", 
    PolicyDocument=Policy( 
        Statement=[ 
            Statement( 
                Effect=Allow, 
                Action=[ 
                    Action("cloudwatch", "Put*"), 
                    Action("logs", "Create*"), 
                    Action("logs", "Put*"), 
                    Action("logs", "Describe*"), 
                    Action("events", "Put*"), 
                    Action("firehose", "Put*"), 
                    Action("autoscaling", "DescribeAutoScalingInstances"), 
                ], 
                Resource=["*"]) 
        ] 
    ), 
    Roles=[Ref("Role")] 
)) 

Save the file. It should be similar to http://bit.ly/2v3cdeM.

Then, once again, update the stacks:

$ git add nodeserver-cf-template.py ...