Policy: CloudWatchAgentAdminPolicy ARN: arn:aws:iam::aws:policy/CloudWatchAgentAdminPolicy Allowed Actions Actions Services cloudwatch:PutMetricData cloudwatch ec2:DescribeTags ec2 logs:CreateLogGroup logs logs:CreateLogStream logs logs:DescribeLogGroups logs logs:DescribeLogStreams logs logs:PutLogEvents logs logs:PutRetentionPolicy logs ssm:GetParameter ssm ssm:PutParameter ssm xray:GetSamplingRules xray xray:GetSamplingStatisticSummaries xray xray:GetSamplingTargets xray xray:PutTelemetryRecords xray xray:PutTraceSegments xray