Today, Amazon CloudWatch added support for using Service-Linked Roles to setup CloudWatch Alarms with EC2 actions. A service-linked role is a unique type of IAM role that is linked directly to CloudWatch. Service-linked roles are predefined by CloudWatch and include all the permissions that the service requires to call other AWS services on your behalf.
