ユーザーデータ と Systems Manager を利用して CloudWatch エージェントを自動セットアップしてみた

{
    "agent": {
            "metrics_collection_interval": 60,
            "run_as_user": "cwagent"
    },
    "metrics": {
            "aggregation_dimensions": [
                    [
                            "InstanceId"
                    ]
            ],
            "append_dimensions": {
                    "AutoScalingGroupName": "${aws:AutoScalingGroupName}",
                    "ImageId": "${aws:ImageId}",
                    "InstanceId": "${aws:InstanceId}",
                    "InstanceType": "${aws:InstanceType}"
            },
            "metrics_collected": {
                    "disk": {
                            "measurement": [
                                    "used_percent"
                            ],
                            "metrics_collection_interval": 60,
                            "resources": [
                                    "*"
                            ]
                    },
                    "mem": {
                            "measurement": [
                                    "mem_used_percent"
                            ],
                            "metrics_collection_interval": 60
                    }
            }
    }
}

{
	"metrics": {
		"aggregation_dimensions": [
			[
				"InstanceId"
			]
		],
		"append_dimensions": {
			"AutoScalingGroupName": "${aws:AutoScalingGroupName}",
			"ImageId": "${aws:ImageId}",
			"InstanceId": "${aws:InstanceId}",
			"InstanceType": "${aws:InstanceType}"
		},
		"metrics_collected": {
			"LogicalDisk": {
				"measurement": [
					"% Free Space"
				],
				"metrics_collection_interval": 60,
				"resources": [
					"*"
				]
			},
			"Memory": {
				"measurement": [
					"% Committed Bytes In Use"
				],
				"metrics_collection_interval": 60
			}
		}
	}
}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "ssm:SendCommand",
                "ssm:ListCommandInvocations",
                "ssm:GetCommandInvocation"
            ],
            "Resource": "*"
        }
    ]
}

#!/bin/bash
TOKEN=$(curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600")

INSTANCE_ID=$(curl -s -H "X-aws-ec2-metadata-token: $TOKEN" http://169.254.169.254/latest/meta-data/instance-id)

INSTALL_COMMAND_ID=$(aws ssm send-command \
  --document-name "AWS-ConfigureAWSPackage" \
  --targets "[{\"Key\":\"InstanceIds\",\"Values\":[\"$INSTANCE_ID\"]}]" \
  --parameters '{"action":["Install"],"installationType":["Uninstall and reinstall"],"name":["AmazonCloudWatchAgent"],"version":["latest"],"additionalArguments":["{}"]}' \
  --region ap-northeast-1 \
  --query "Command.CommandId" \
  --output text)

while true; do
  STATUS=$(aws ssm list-command-invocations \
    --command-id "$INSTALL_COMMAND_ID" \
    --details \
    --query "CommandInvocations[0].Status" \
    --output text \
    --region ap-northeast-1)

  if [[ "$STATUS" == "Success" ]]; then
    break
  elif [[ "$STATUS" == "Failed" || "$STATUS" == "Cancelled" ]]; then
    exit 1
  else
    sleep 10
  fi
done

aws ssm send-command \
  --document-name "AmazonCloudWatch-ManageAgent" \
  --targets "[{\"Key\":\"InstanceIds\",\"Values\":[\"$INSTANCE_ID\"]}]" \
  --parameters '{"action":["configure"],"mode":["ec2"],"optionalConfigurationSource":["ssm"],"optionalConfigurationLocation":["AmazonCloudWatch-linux"],"optionalRestart":["yes"]}' \
  --region ap-northeast-1

<powershell>
Set-Service -Name AmazonSSMAgent -StartupType Automatic
Start-Service AmazonSSMAgent

while ((Get-Service -Name AmazonSSMAgent).Status -ne 'Running') {
    Start-Sleep -Seconds 5
}

$token = Invoke-RestMethod -Method PUT -Uri "http://169.254.169.254/latest/api/token" -Headers @{"X-aws-ec2-metadata-token-ttl-seconds"="21600"}

$instanceId = Invoke-RestMethod -Method GET -Uri "http://169.254.169.254/latest/meta-data/instance-id" -Headers @{"X-aws-ec2-metadata-token"=$token}

$installCommand = Send-SSMCommand `
    -DocumentName "AWS-ConfigureAWSPackage" `
    -Targets @(@{Key="InstanceIds"; Values=@($instanceId)}) `
    -Parameters @{
        action=@("Install");
        installationType=@("Uninstall and reinstall");
        version=@("latest");
        additionalArguments=@("{}");
        name=@("AmazonCloudWatchAgent")
    } `
    -Region "ap-northeast-1"

$installCommandId = $installCommand.CommandId

while ($true) {
    Start-Sleep -Seconds 10

    $status = (Get-SSMCommandInvocation -CommandId $installCommandId -InstanceId $instanceId -Region "ap-northeast-1").Status

    if ($status -eq "Success") {
        break
    } elseif ($status -eq "Failed" -or $status -eq "Cancelled") {
        exit 1
    }
}

Send-SSMCommand `
    -DocumentName "AmazonCloudWatch-ManageAgent" `
    -Targets @(@{Key="InstanceIds"; Values=@($instanceId)}) `
    -Parameters @{
        action=@("configure");
        mode=@("ec2");
        optionalConfigurationSource=@("ssm");
        optionalConfigurationLocation=@("AmazonCloudWatch-windows");
        optionalRestart=@("yes")
    } `
    -Region "ap-northeast-1"
</powershell>

systemctl status amazon-cloudwatch-agent.service
● amazon-cloudwatch-agent.service - Amazon CloudWatch Agent
     Loaded: loaded (/etc/systemd/system/amazon-cloudwatch-agent.service; enabled; preset: disabled)
     Active: active (running) since Sun 2025-02-02 06:27:33 UTC; 57s ago
   Main PID: 2440 (amazon-cloudwat)
      Tasks: 6 (limit: 1111)
     Memory: 22.5M
        CPU: 275ms
     CGroup: /system.slice/amazon-cloudwatch-agent.service
             └─2440 /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent -config /opt/aws/amazon-cloudwatch-agent/etc/amazon-cloudwatch-agent.toml -envconfig /opt/aws/amazon-cloudw>

PS C:\Windows\system32> Get-Service -Name AmazonCloudWatchAgent

Status   Name               DisplayName
------   ----               -----------
Running  AmazonCloudWatc... Amazon CloudWatch Agent