cloudformation-EC2-CW-Logs-role.json

{
  "AWSTemplateFormatVersion" : "2010-09-09",

  "Description" : "Crear una instancia EC2 y la configura para CloudWatch Logs",


  "Resources" : {

    "EIP" : {
      "Type" : "AWS::EC2::EIP",
      "DependsOn" : "SyslogEC2",
      "Properties" : {
        "Domain" : "vpc-ec29d988",
        "InstanceId" : { "Ref" : "SyslogEC2" }
      }
    },

    "SyslogEC2" : {
      "Type" : "AWS::EC2::Instance",
      "Properties" : {
        "InstanceType" : "t2.micro",
        "AvailabilityZone" : "us-east-1d",
        "ImageId"  : "ami-fce3c696",
        "NetworkInterfaces" : [{
          "AssociatePublicIpAddress" : "false",
          "DeviceIndex": "0",
          "SubnetId" : "subnet-563f3a21",
          "GroupSet" : ["sg-400b6f3b"]
        }],
        "UserData" : { "Fn::Base64": { "Fn::Join" : [  "" , [
                "#!/bin/bash\n",
                "apt-get update -y\n",
                "curl https://s3.amazonaws.com/aws-cloudwatch/downloads/latest/awslogs-agent-setup.py -O\n",
                "chmod +x ./awslogs-agent-setup.py\n",
                "./awslogs-agent-setup.py -n -r us-east-1 -c s3://gil-cloudwatch-log-config-file/awslogs-hma.cfg\n"
          ]]} },
          "IamInstanceProfile" : "aws-logger-role-EC2" ,
          "Tags" : [
            { "Key" : "Name" , "Value" : { "Ref" : "AWS::StackName"} },
            { "Key" : "Cuenta" , "Value" : "HMA" }
          ],
          "KeyName" : "default-test-infragig"
      }
    }
  }
}

CloudFormation Template para lanzar instancia EC2, asignarle rol para poder crear Log Stream en CloudWatch y redireccionar logs