Prerequisites - Amazon CloudWatch
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.


You must complete the following prerequisites to configure an application with CloudWatch Application Insights:

  • Amazon SSM enablement. You must install Systems Manager Agent (SSM Agent), and your instances must be SSM enabled. For steps on how to install the SSM Agent, see Setting Up Amazon SSM.

  • EC2 instance role. You must attach the AmazonSSMManagedInstanceCore role to enable Systems Manager (see Using Identity-based Policies (IAM Policies) for AAmazon SSM) and the CloudWatchAgentServerPolicy to enable instance metrics and logs to be emitted through CloudWatch. See Create IAM Roles and Users for Use With CloudWatch Agent for more information.

  • Amazon resource groups. To onboard your applications to CloudWatch Application Insights, you must create a resource group that includes all associated Amazon resources used by your application stack. This includes application load balancers, EC2 instances running IIS and web front‐end, .NET worker tiers, and your SQL Server database. CloudWatch Application Insights automatically includes Auto Scaling groups using the same tags or CloudFormation stacks as your resource group, because Auto Scaling groups are not currently supported by resource groups. For more information, see Getting Started with Amazon Resource Groups.

  • IAM permissions: For non‐admin users, you must create an Amazon Identity and Access Management (IAM) policy that allows Application Insights to create a service-linked role, and attach it to your user identity. For steps on attaching the policy, see IAM policy.

  • Service-linked role: CloudWatch Application Insights uses Amazon Identity and Access Management (IAM) service‐linked roles. A service‐linked role is created for you when you create your first CloudWatch Application Insights application in the Amazon Management Console. For more information, see Using service-linked roles for CloudWatch Application Insights.

  • Performance Counter metrics support for EC2 Windows instances: To monitor Performance Counter metrics on your EC2 Windows instances, Performance Counters must be installed on the instances. For Performance Counter metrics and corresponding Performance Counter set names, see Performance Counter metrics. For more information about Performance Counters, see Performance Counters.