Add the Name field to the Machine Properties Table

For a Lacework agent to be able to retrieve the EC2 instance 'Name' tag, the EC2 instance must have permission to DescribeTags.

To provide the necessary permission, complete the following steps:

1. Log in to the IAM service.
2. Select Policies.
3. Click Create policy.

4. Select the JSON tab and replace the displayed policy with the following text.

     {
        "Version": "2012-10-17",
        "Statement": [
           {
              "Effect": "Allow",
              "Action": "ec2:DescribeTags",
              "Resource": "*"
           }
        ]
     }  

5. Click Review policy.

6. Enter a policy name and description.
7. Click Create policy.

After creating the policy, associate it with a role that can be attached to EC2 instances.

1. Select Roles.
2. Click Create role.
3. Select AWS service and EC2.
4. Click Next: Permissions.
5. Search for your newly created policy, select it and click Next: Review.
6. Enter a role name, update the description if you want and click Create role.

After creating the role and policy, navigate to the EC2 service and select the instance for which you want to retrieve the 'Name' tag.

Under Actions > Instance Settings > Attach/Replace IAM Role, enter the just created IAM role and click Apply.

The next time the Lacework agent forwards data, you will see the 'Name' field populated.