Enabling Amazon EC2 Events

After adding an Amazon EC2 provider and configuring notifications in [amazon-provider-aws-config-notifications], create a CloudTrail, then configure a CloudWatch rule on your EC2 provider to automatically get events in {product-title} to monitor the provider.

The following procedures are accurate at time of publishing. See the Amazon AWS documentation for further details: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/

In the CloudTrail area of the AWS Management Console, create a trail and an S3 bucket:

  1. Create a Trail with a custom name.

  2. Apply the trail to all regions by selecting Yes.

  3. For Management Events, select Read/Write events: All.

  4. Create a new S3 bucket.

In the CloudWatch area of the AWS Management Console, create a rule:

  1. Navigate to menu:Events[Rules].

  2. Create a rule containing the following Event Pattern:

    {
  "source": [
    "aws.ec2"
  ],
  "detail-type": [
    "AWS API Call via CloudTrail"
  ],
  "detail": {
    "eventSource": [
      "ec2.amazonaws.com"
    ]
  }
}

  3. Add a Target with the following attributes:

    • Type: SNS Topic

    • Topic: AWSConfig_topic

    • Input: Matched event

  4. Click Configure Details to save these details.

  5. Configure rule details on the next screen, providing a name and description (if desired). Ensure the Enabled checkbox is selected for State.

  6. Click Create Rule.

EC2 can now automatically refresh events in {product-title_short}.

When an SNS topic is deleted and recreated (manually or by {product-title_short}), CloudWatch rules must be recreated as well, even though the SNS target topic for CloudWatch rules appears to be assigned to these rules. The CloudWatch rule does not send events to this recreated topic until it is recreated too.