---
title: "Monitor AWS via the Terraform Cloudwatch Module"
description: "Learn how to monitor and provision with the Terraform Cloudwatch module and keep your AWS infrastructure healthy and in check!"
canonical: "https://adamtheautomator.com/terraform-cloudwatch/"
---

# Monitor AWS via the Terraform Cloudwatch Module

> Learn how to monitor and provision with the Terraform Cloudwatch module and keep your AWS infrastructure healthy and in check!

Source: https://adamtheautomator.com/terraform-cloudwatch/

---

ATA Learning

Tap to hide

[

ATA Learning

](/)

*   [Home](/)
*   [Tutorials](/tutorials/)
*   [Instructors](/author/)
*   [Advertising](/advertising/)
*   [Recommended Resources](/resources/)
*   [About Adam](/about-adam/)

Search for:  

*   [](https://twitter.com/adbertram)
*   [](https://github.com/Adam-the-Automator)
*   [](https://www.linkedin.com/company/adam-the-automator-llc)
*   [](/feed/)

![Monitor AWS via the Terraform Cloudwatch Module](https://adamtheautomator.com/wp-content/uploads/2022/07/How-to-Monitor-AWS-via-the-Terraform-Cloudwatch-Module.jpg)

# Monitor AWS via the Terraform Cloudwatch Module

[![](https://secure.gravatar.com/avatar/2beb65fca997135120ed98dc6a2e57dcdf1a7d7d2f5ff687b5d91dc7ccd7a6b5?s=192&d=mm&r=g)Sagar](https://adamtheautomator.com/author/shanky-mendiratta/)11 July 20225 min. read

Categories: [IT Ops](/category/it-ops/)

Tags:[AWS](/tag/aws/)[AWS Cloudwatch](/tag/aws-cloudwatch/)[Terraform](/tag/terraform/)

Table of Contents

*   [Prerequisites](#prerequisites)
*   [Building the Configuration for a Terraform CloudWatch Module](#building-the-configuration-for-a-terraform-cloudwatch-module)
*   [Creating the Monitors and Log Groups with a Terraform CloudWatch Module](#creating-the-monitors-and-log-groups-with-a-terraform-cloudwatch-module)
*   [Monitoring EC2 and Other AWS Services Using CloudWatch Alarm](#monitoring-ec2-and-other-aws-services-using-cloudwatch-alarm)
*   [Conclusion](#conclusion)

As your AWS cloud Infrastructure grows, monitoring dozens of AWS services becomes challenging and tedious, and you certainly need to monitor AWS resources. Luckily, the AWS CloudWatch service is an excellent tool for monitoring a vast AWS infrastructure.

Not a reader? Watch this related video tutorial!

**_Not seeing the video? Make sure your ad blocker is disabled._**

AWS CloudWatch is a service for monitoring the resource utilization, application performance, and operational health of the AWS infrastructure.

In this tutorial, you will learn how you can provision AWS CloudWatch and its components in AWS Cloud using the Terraform CloudWatch Module.

## **Prerequisites**

This post will be a step-by-step tutorial. If you’d like to follow along, ensure you have the following in place:

*   An [Amazon Web Service (AWS) account](https://repost.aws/knowledge-center/create-and-activate-aws-account).
    
*   A code editor – Even though you can use any text editor to work with Terraform configuration files, consider using [Visual Studio (VS) Code](https://code.visualstudio.com/) as it understands the HCL Terraform language well.
    
*   [](https://developer.hashicorp.com/terraform/enterprise/install/pre-install-checklist)[Terraform](https://developer.hashicorp.com/terraform/enterprise/install/pre-install-checklist) – This tutorial uses [Terraform](https://adamtheautomator.com/install-terraform/) v1.1.5 running on Ubuntu 20.04 LTS, but any operating system with Terraform should work.
    

Related:[How to Install Terraform on Linux and Windows](https://adamtheautomator.com/install-terraform/)

*   [IAM role](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html) attached on Ubuntu 20.04 LTS with full privileges to create AWS Elastic File System (EFS) and related components.
    
*   An email account for receiving the monitoring email notifications.
    

## Building the Configuration for a Terraform CloudWatch Module

Terraform is an infrastructure as code tool that allows you to build, change, and version infrastructure via a configuration. Since you’ll be using the Terraform CloudWatch module to create CloudWatch metrics and alarms in AWS Cloud, you’ll first have to build a Terraform configuration for AWS CloudWatch. Start building the Terraform configuration as follows.

1\. Log in to the Ubuntu machine with your favorite SSH client.

Related:[How to Set up the SSH Chrome Extension](https://adamtheautomator.com/ssh-chrome-extension/)

2\. Next, run the commands below to create a working directory called ~/terraform-cloudwatch-demo_._ This folder will contain all of the configuration files you’ll be working on in this tutorial.

```bash
mkdir ~/terraform-cloudwatch-demo
cd ~/terraform-cloudwatch-demo
```

3\. Open your preferred code editor and create a file called _main.tf_ inside the ~/terraform-cloudwatch-demo directory.

Copy/paste the following configuration to the _main.tf_ file, and save the changes. This _main.tf_ file is the Terraform configuration for the AWS CloudWatch.

The below Terraform configuration creates the following resources:

*   **CloudWatch Dashboard**: The CloudWatch Dashboard shows all the metrics of all the Running AWS EC2 instances based on CPU utilization.
    
*   **CloudWatch metrics alarm**: First, you need to set the metric on the AWS resource, such as a CPU threshold of 70 percent, and then a metric alarm keeps an eye on the CloudWatch metric and generates the alert based on the same.
    
*   **CloudWatch log group**: In AWS CloudWatch, the Log groups contain the log streams, which contain the same monitoring, and access control settings. A log stream is a sequence of log events that share the same source, and a log group is a group of log streams that share the same retention.
    
*   **A composite alarm:** Includes a rule expression that considers the alarm states of other alarms you have created. The composite alarm goes into ALARM state only if the resource thresholds meet all the rules’ conditions.
    

> _Note: The Terraform configuration below is specific to this tutorial and to the AWS subscription it uses. Make sure to customize the configuration as needed or if you encounter errors._

```bash

resource "aws_cloudwatch_dashboard" "EC2_Dashboard" {
  dashboard_name = "EC2-Dashboard"

  dashboard_body = <<EOF
{
    "widgets": [
        {
            "type": "explorer",
            "width": 24,
            "height": 15,
            "x": 0,
            "y": 0,
            "properties": {
                "metrics": [
                    {
                        "metricName": "CPUUtilization",
                        "resourceType": "AWS::EC2::Instance",
                        "stat": "Maximum"
                    }
                ],
                "aggregateBy": {
                    "key": "InstanceType",
                    "func": "MAX"
                },
                "labels": [
                    {
                        "key": "State",
                        "value": "running"
                    }
                ],
                "widgetOptions": {
                    "legend": {
                        "position": "bottom"
                    },
                    "view": "timeSeries",
                    "rowsPerPage": 8,
                    "widgetsPerRow": 2
                },
                "period": 60,
                "title": "Running EC2 Instances CPUUtilization"
            }
        }
    ]
}
EOF
}

resource "aws_cloudwatch_composite_alarm" "EC2" {
  alarm_description = "Composite alarm that monitors CPUUtilization "
  alarm_name        = "EC2_Composite_Alarm"
  alarm_actions = [aws_sns_topic.EC2_topic.arn]

  alarm_rule = "ALARM(${aws_cloudwatch_metric_alarm.EC2_CPU_Usage_Alarm.alarm_name}) OR ALARM(${aws_cloudwatch_metric_alarm.EBS_WriteOperations.alarm_name})"

  depends_on = [
    aws_cloudwatch_metric_alarm.EC2_CPU_Usage_Alarm,
    aws_sns_topic.EC2_topic,
    aws_sns_topic_subscription.EC2_Subscription
  ]
i}


# Creating the AWS CLoudwatch Alarm that will autoscale the AWS EC2 instance based on CPU utilization.
resource "aws_cloudwatch_metric_alarm" "EC2_CPU_Usage_Alarm" {
# defining the name of AWS cloudwatch alarm
  alarm_name          = "EC2_CPU_Usage_Alarm"
  comparison_operator = "GreaterThanOrEqualToThreshold"
  evaluation_periods = "2"
# Defining the metric_name according to which scaling will happen (based on CPU) 
  metric_name = "CPUUtilization"
# The namespace for the alarm's associated metric
  namespace = "AWS/EC2"
# After AWS Cloudwatch Alarm is triggered, it will wait for 60 seconds and then autoscales
  period = "60"
  statistic = "Average"
# CPU Utilization threshold is set to 10 percent
  threshold = "70"
alarm_description     = "This metric monitors ec2 cpu utilization exceeding 70%"


resource "aws_cloudwatch_log_group" "ebs_log_group" {
  name = "ebs_log_group"
  retention_in_days = 30
}


resource "aws_cloudwatch_log_stream" "ebs_log_stream" {
  name           = "ebs_log_stream"
  log_group_name = aws_cloudwatch_log_group.ebs_log_group.name
}


resource "aws_sns_topic" "EC2_topic" {
  name = "EC2_topic"
}

resource "aws_sns_topic_subscription" "EC2_Subscription" {
  topic_arn = aws_sns_topic.EC2_topic.arn
  protocol  = "email"
  endpoint  = "automateinfra@gmail.com"

  depends_on = [
    aws_sns_topic.EC2_topic
  ]
}
```

4\. Create another file in _~/terraform-cloudwatch-demo_ named _provider.tf,_ and populate the file with the content below.

The _provider.tf_ file contains [Terraform providers](https://developer.hashicorp.com/terraform/language/providers) as Terraform depends on the plugins to connect or interact with cloud providers or API services.

> _Including all configuration values in a single configuration file is possible. But to keep things clear for developers and admins, breaking the logic and variables into separate files is preferable._

```bash
# Declaring the AWS Provider
provider "aws" {
   region = "us-east-1"
 }
```

> _The tutorial creates resources in the us-east-1 region. But a list of [regions that AWS support](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-regions) is also available._

Related:[Getting Started with the Terraform AWS Provider](https://adamtheautomator.com/terraform-aws/)

5\. Finally, run the tree command to verify all required files in the _~/terraform-cloudwatch-demo_ directory, as shown below.

```bash
tree
```

![Verifying the Required Files for Building AWS EFS in AWS Cloud](https://adamtheautomator.com/wp-content/uploads/2022/07/image-77.png)

Verifying the Required Files for Building AWS EFS in AWS Cloud

## Creating the Monitors and Log Groups with a Terraform CloudWatch Module

Now that you have the Terraform configuration file and variables files set up, it’s time to initiate Terraform and create the AWS CloudWatch and its components.

To provision the AWS CloudWatch components such as Cloudwatch Dashboard, log group, and metrics alarm, like all other Terraform configurations, Terraform uses three commands in sequence ([terraform init](https://developer.hashicorp.com/terraform/cli/commands/init), [terraform plan](https://developer.hashicorp.com/terraform/cli/commands/plan), and [terraform apply](https://developer.hashicorp.com/terraform/cli/commands/apply)).

> _If the Terraform configuration files you created are not correctly formatted, you can run the [terraform fmt](https://developer.hashicorp.com/terraform/cli/commands/fmt) command to fix them._

1\. Run the terraform init command in the ~/_terraform-backend-demo_ directory to initialize the plugins and providers required to work with resources.

```bash
terraform init
```

If all goes well, you’ll see the message that says Terraform has been successfully initialized in the output, as shown below.

![Running the Terraform initialization](https://adamtheautomator.com/wp-content/uploads/2022/07/image-78.png)

Running the Terraform initialization

2\. Next, run the terraform plan command to ensure your syntax of configuration files is correct and gives you a blueprint of resources you will provision in your infrastructure.

```bash
terraform plan
```

Once the command completes, you’ll see a message like Plan: “X” to add, “Y” to change, or “Z” to destroy in the output. Below, the Plan shows 4 to add as four resources to create.

![Running terraform plan](https://adamtheautomator.com/wp-content/uploads/2022/07/image-79.png)

Running terraform plan

3\. Finally, run the terraform and apply the command to provision the AWS CloudWatch and related components using each configuration (_\*.tf_) in the current directory.

The –auto-approve parameter automatically accepts all prompts while running the command.

```bash
terraform apply --auto-approve
```

![Applying the Terraform configuration](https://adamtheautomator.com/wp-content/uploads/2022/07/image-80.png)

Applying the Terraform configuration

## Monitoring EC2 and Other AWS Services Using CloudWatch Alarm

You should have created the AWS CloudWatch and related components with Terraform. But how do you know they exist in your AWS cloud? Verify the AWS CloudWatch service and components by manually checking the AWS Management Console.

1\. Open your favorite web browser and log in to the [AWS Management Console](https://aws.amazon.com/console/).

2\. On the console’s home page, click on the search box, search for and click ‘CloudWatch’ to access the CloudWatch dashboard. Your browser automatically redirects the page to the CloudWatch dashboard.

![Navigating to the AWS Cloudwatch Service Page](https://adamtheautomator.com/wp-content/uploads/2022/07/image-81.png)

Navigating to the AWS Cloudwatch Service Page

3\. Once on the CloudWatch page, click Dashboard on the left navigation menu. You should see the EC2 Dashboard you created. Click on EC2-Dashboard to view the Dashboard.

![Viewing the EC2-Dashboard on the CLoudWatch Dashboard](https://adamtheautomator.com/wp-content/uploads/2022/07/image-82.png)

Viewing the EC2-Dashboard on the CLoudWatch Dashboard

4\. After you click on EC2-Dashboard, the page opens the Dashboard and shows the CPU utilization of all the running instances in the AWS account.

As you can see below, there are three pre-configured instances in the account, and three different colored lines show their CPU utilization for the last 9 hours.

![Viewing the CPU utilization of three different AWS EC2 instances in Cloudwatch Dashboard](https://adamtheautomator.com/wp-content/uploads/2022/07/image-83.png)

Viewing the CPU utilization of three different AWS EC2 instances in Cloudwatch Dashboard

5\. Next, click on the All alarms menu as shown below, and you will see EC2\_CPU\_Usage\_alarms that you specified in Terraform.

![Viewing the alarm on the CLoudwatch page](https://adamtheautomator.com/wp-content/uploads/2022/07/image-84.png)

Viewing the alarm on the CLoudwatch page

6\. Now, verify if the CloudWatch log group you created is on the CloudWatch page. To verify, click on Log groups, and you should see ebs\_log\_group.

![Verifying the CloudWatch log group in the AWS console](https://adamtheautomator.com/wp-content/uploads/2022/07/image-85.png)

Verifying the CloudWatch log group in the AWS console

7\. Further, click on ebs\_log\_group log group, and you will see all the details of the log group, such as Retention, creation time, and log group ARN. Also, you will see the Log streams present for the log group (ebs\_log\_stream).

![Viewing the Log Group details and Log streams in the CLoudwatch](https://adamtheautomator.com/wp-content/uploads/2022/07/image-86.png)

Viewing the Log Group details and Log streams in the CLoudwatch

8\. To verify the [Amazon Simple Notification Service (SNS)](https://aws.amazon.com/sns/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc) topic you created, navigate to the SNS page in the AWS management console, and you should see Topics on the left sidebar. When the CPU utilization crosses the threshold and triggers the alarm, this topic notifies you through the SNS subscription.

![Validating the SNS topic to send an email notification](https://adamtheautomator.com/wp-content/uploads/2022/07/image-87.png)

Validating the SNS topic to send an email notification

If the CPU crosses the threshold, you will receive an email as shown below on your email account.

> _You can visit this link to learn about setting up email notifications._

![Receiving an email using AWS SNS from AWS when the CloudWatch alarm is triggered ](https://adamtheautomator.com/wp-content/uploads/2022/07/image-88.png)

Receiving an email using AWS SNS from AWS when the CloudWatch alarm is triggered

## Conclusion

In this tutorial, you’ve learned how to set up AWS Cloud watch components and monitor the data stored on the CloudWatch Page. You also learned to monitor the metrics in various visualizations in different panels within the CloudWatch Dashboard.

You now have fully functional AWS CloudWatch components in your AWS account. Go wild and test out everything you can with the CloudWatch Dashboard and its features.

Share this article

[Share on X](https://twitter.com/intent/tweet?url=https%3A%2F%2Fadamtheautomator.com%2Fterraform-cloudwatch%2F&text=Monitor%20AWS%20via%20the%20Terraform%20Cloudwatch%20Module)[Share on Facebook](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fadamtheautomator.com%2Fterraform-cloudwatch%2F)[Share on LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fadamtheautomator.com%2Fterraform-cloudwatch%2F)

## Related Posts

![](https://adamtheautomator.com/wp-content/uploads/2022/01/How-to-Migrate-Existing-Terraform-State-into-Terraform-Cloud.jpg)

### [How to Migrate Existing Terraform State into Terraform Cloud](/terraform-state/)

Learn how to migrate your existing Terraform state files into Terraform Cloud, and never worry about losing changes in your state file in this step-by-step tutorial!

![](https://adamtheautomator.com/wp-content/uploads/2024/03/terragrunt.png)

### [Keeping Terraform Maintainable with Terragrunt](/terragrunt/)

Discover Terragrunt and embrace the power to simplify Terraform workflows—Ensure maintainability and organization of your infrastructure today!

![](https://adamtheautomator.com/wp-content/uploads/2022/05/HMaster-Your-Data-with-AWS-Quicksight.jpg)

### [Make Data-Driven Decisions with AWS QuickSight Analytics](/aws-quicksight/)

Struggling to make sense of your data? Discover how AWS QuickSight transforms data into actionable insights for smarter decision-making.

## Categories

*   [IT Ops](/category/it-ops/)
*   [Cloud](/category/cloud/)
*   [DevOps](/category/devops/)
*   [Home Ops](/category/home-ops/)
*   [Information Security](/category/infosec/)
*   [Software Development](/category/software-development/)

## Site

*   [Home](/)
*   [Tutorials](/tutorials/)
*   [Instructors](/author/)
*   [Advertising](/advertising/)
*   [Recommended Resources](/resources/)
*   [About Adam](/about-adam/)

Copyright 2026© ATA Learning | [Privacy Policy](/privacy/)