Collecting data from Amazon Web Services
Prerequisites
- You must have an AWS account and the required credentials to log in it.
- You must have sufficient privileges to modify the AWS Identity and Access Management (IAM) service details
Supported AWS regions
The following AWS regions are supported.
AP_NORTHEAST_1 | AP_SOUTHEAST_2 | EU_WEST_1 | US_EAST_1 |
AP_NORTHEAST_2 | CA_CENTRAL_1 | EU_WEST_2 | US_EAST_2 |
AP_SOUTH_1 | CN_NORTH_1 | GovCloud | US_WEST_1 |
AP_SOUTHEAST_1 | EU_CENTRAL_1 | SA_EAST_1 | US_WEST_2 |
To create credentials to access AWS
TrueSight Intelligence integrates directly with AWS to collect and display metrics from Amazon CloudWatch. You must have credentials that enable the required privileges from the cloud services.
The principle of least privilege dictates that a user, process, or program must be able to access only the information and resources that are necessary. The following procedures describe how to configure your AWS account to generate the minimum access credentials required to integrate your AWS account with TrueSight Intelligence.
The AWS IAM service enables you to manage users and permissions in AWS. If you are unfamiliar with this service, see http://aws.amazon.com/documentation/iam/ for additional details. The following instructions assume that you have a basic understanding of IAM.
To create a user
Create a TrueSight user with the required keys.
Sign in to the AWS Management Console and open the IAM console at https://console.aws.amazon.com/iam.
- From the menu pane on the left of the IAM dashboard, select Users.
- Click Create New Users.
- In the User name box, type truesight.
- Select the Generate an access key for each user checkbox.
- Click Create.
Click Download Credentials to save the credentials (Access Key ID and Secret Access Key) to a file.
The Access Key ID and Secret Access Key are required to configure the integration with TrueSight Intelligence.
- Click Close.
To create a group
Create a new group and assign the required permissions policy.
- From the menu pane on the left of the IAM dashboard, select Groups.
- Click Create New Group.
- In the Group Name box, type Truesight and click Next Step.
- From the list, select the policy name CloudWatchReadOnlyAccess checkbox and click Next Step.
- Click Create Group to return to the Groups editor.
To assign the user to the group
Associate the truesight user with the Truesight group, so that the truesight user has the required permissions.
- From the menu pane on the left of the IAM dashboard, select Groups.
- Select the checkbox next to the Truesight group name.
- From the Group Actions list, select Add Users to Group.
- Select the check box next to truesight.
- Click Add Users.
To configure the integration
- Click
> Data Collection > AWS and click Add to integrate and collect data from your Amazon Web Services cloud instance.
- Use the AWS Configuration section to provide the details required to configure data collection from AWS.
- Type a display Name for the AWS instance.
- Type a Description for your reference.
- Set the Polling Frequency (mins) used for polling the AWS instance.
- Type the Access Key for your AWS user.
- Type the Secret Key for the AWS user.
For more information about getting the values for the Access Key and Secret Key, see To create credentials to access AWS, earlier in this topic. - Type the TrueSight Intelligence App Name to which the AWS data will be associated.
Click Validate and Continue to validate the details and open the AWS Services section to select the AWS services.
Amazon API Gateway
Amazon ElastiCache
Amazon Redshift
Auto Scaling
Elastic Load Balancing
Amazon Simple Storage Service
AWS Billing
Amazon EMR
Amazon Simple Notification Service
Amazon CloudFront
Amazon Kinesis Streams
Amazon Simple Queue Service
Amazon DynamoDB
Amazon Lambda
AWS Storage Gateway
Amazon Elastic Block Store
Amazon Machine Learning
Amazon Simple Workflow Service
Amazon EC2
AWS OpsWorks
Amazon WorkSpaces
Amazon EC2Spot
Amazon Relational Database Service
Amazon Route53
Click Continue to open the AWS Metrics section.
The [confluence_table-filter] macro is a standalone macro and it cannot be used inline. Click on this message for details.
- Select one or more metrics, or select all metrics to collect data. Use the search box to filter and display metrics that contain specific keywords.
- Click Save to save the integration.