Hi, You need to have a IAM Role associated with the Palo Alto EC2 instance. AWSTemplateFormatVersion: 2010-09-09 Resources: IAM-NPD-INT-PAFWMON: Type: 'AWS::IAM::Role' Properties: AssumeRolePolicyDocument: Version: 2012-10-17 Statement: - Effect: Allow Principal: Service: - ec2.amazonaws.com Action: - sts:AssumeRole Policies: - PolicyName: PAFWMON_Policy PolicyDocument: Version: 2012-10-17 Statement: - Effect: Allow Action: cloudwatch:PutMetricData Resource: '*' RootInstanceProfile: Type: "AWS::IAM::InstanceProfile" Properties: Path: "/" Roles: - Ref: "IAM-NPD-INT-PAFWMON"
... View more