instance_profiles.tf

resource "aws_iam_instance_profile" "ec2ssm2" {
  name = "ec2ssm2"
  role = aws_iam_role.rolessm.name
}

resource "aws_iam_role" "rolessm" {
  name = "rolessm"
  path = "/"

  assume_role_policy = <<EOF
{
    "Version": "2012-10-17",
    "Statement": [
    {
        "Action": "sts:AssumeRole",
        "Principal": {
        "Service": "ec2.amazonaws.com"
        },
        "Effect": "Allow",
        "Sid": ""
    }
    ]
}
EOF
}

#resource "aws_iam_policy" "AmazonEC2RoleforSSM" {
#  arn = "arn:aws:iam::aws:policy/AmazonEC2RoleforSSM"
#}

resource "aws_iam_role_policy_attachment" "AmazonEC2RoleforSSM-policy-attach" {
    policy_arn = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
    role       = aws_iam_role.rolessm.name
}

resource "aws_iam_role_policy_attachment" "CloudWatchAgentServerPolicy-policy-attach" {
    policy_arn = "arn:aws:iam::aws:policy/CloudWatchAgentServerPolicy"
    role       = aws_iam_role.rolessm.name
}