anchor.diff:  
   . Choose *Next:Tags*.  Then on the next page, click *Next:Review*.
   
  -. Now give your policy an name, such as "CloudWatch_Policy". Then click *Create Policy*.
  +. Now give your policy a name, such as "CloudWatch_Policy". Then click *Create Policy*.
   
   Your policy will be created.
   
  -== Create a Role
  +== Create an IAM Role
   
  -A role is an identity that has specific permissions defined by a policy.
  +A role is an identity that has specific permissions defined by a policy. A role can be used to define the permissions for an EC2 instance.
  +
  +. Return to the IAM Dashboard.
  +. From the left menu, choose Roles, then select *Create Role*. You should see:
  ++
  +image:https://github.com/killbill/killbill-docs/raw/v3/userguide/assets/aws/create-iam-role.png[align=center]
  +
  +. Under *Common Use Cases*, select *EC2*. Then click *Next*.
  +. On the next page, select the policy you created. Then click *Next*.
  +. Give your role a name, such as "CloudWatch_Role". Then click *Create Role*.
  +
  +Your role will be created.
  +
  +
   
   == Attach Role to EC2 Instance
   
  
positive.code: 
  == Using CloudWatch
  
  
  
  
  
  
negative.code: instance* so the new configuration file will be read. If you have more
  than one instance, follow the same procedure for each one.
  
  == Install the X-Ray daemon
  
  AWS X-Ray is a service that collects and analyzes data from your applications. A daemon is a process that runs in the background to do a job whenever it is needed. The X-Ray daemon uploads application metrics to X-Ray in batches to be processed. X-Ray then forwards this data to CloudWatch for display.
  
  To setup the daemon, log in to your EC2 instance and run the following commands:
  
  ```
  curl https://s3.dualstack.us-east-1.amazonaws.com/aws-xray-assets.us-east-1/xray-daemon/aws-xray-daemon-3.x.deb -o /home/ubuntu/xray.deb
  