| 12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970 | resource "aws_iam_instance_profile" "nuxeo_instance_profile" {    name  = "nuxeo-instance-profile"  roles = ["${aws_iam_role.nuxeo_role.name}"]}resource "aws_iam_role" "nuxeo_role" {    name = "nuxeo-role"  assume_role_policy = <<EOF{  "Version": "2012-10-17",  "Statement": [    {      "Action": "sts:AssumeRole",      "Principal": {        "Service": "ec2.amazonaws.com"      },      "Effect": "Allow",      "Sid": ""    }  ]}EOF  }resource "aws_iam_policy" "CloudWatchAccess" {    name        = "CloudWatchAccess-nuxeo"  description = "CloudWatch Access"  policy = <<EOF{    "Version": "2012-10-17",    "Statement": [        {            "Effect": "Allow",            "Action": [               "cloudwatch:DeleteAlarms",               "cloudwatch:DescribeAlarmHistory",               "cloudwatch:DescribeAlarms",               "cloudwatch:DescribeAlarmsForMetric",               "cloudwatch:DisableAlarmActions",               "cloudwatch:EnableAlarmActions",               "cloudwatch:GetMetricData",               "cloudwatch:GetMetricStatistics",               "cloudwatch:ListMetrics",               "cloudwatch:PutMetricAlarm",               "cloudwatch:PutMetricData",               "cloudwatch:SetAlarmState",               "logs:CreateLogGroup",               "logs:CreateLogStream",               "logs:GetLogEvents",               "logs:PutLogEvents",               "logs:DescribeLogGroups",               "logs:DescribeLogStreams",               "logs:PutRetentionPolicy"            ],            "Resource": [                "*"            ]        }    ]}EOF  }resource "aws_iam_policy_attachment" "attach_cloudwatch" {    name       = "nuxeo-iam-attachment"  policy_arn = "${aws_iam_policy.CloudWatchAccess.arn}"  roles      = ["${aws_iam_role.nuxeo_role.name}"]}
 |