Skip to content

Latest commit

 

History

History
58 lines (46 loc) · 5.4 KB

stack.md

File metadata and controls

58 lines (46 loc) · 5.4 KB
Raw

Observe AWS Stack

The Observe AWS stack is designed to aggregate and forward a wide range of AWS resource data, logs, and metrics to Observe, facilitating comprehensive observability of your AWS environment.

Overview

This stack centralizes the collection process by deploying necessary AWS services and linking them to ensure seamless data flow towards your Observe Filedrop.

Stack

The Observe stack provisions the following components:

  1. A Forwarder stack is provisioned which is responsible for writing data into Observe.
  2. Two sources are provisioned and subscribed to our Forwarder:
    • a) an S3 bucket where objects can be written to
    • b) an SNS topic where events can be pushed to
  3. A set of optional stacks are provisioned which are responsible for dumping data into our two sources:
    • a) a MetricStream stack is responsible for writing CloudWatch Metrics to S3,
    • b) a LogWriter stack is responsible for writing CloudWatch Logs data to S3,
    • c) a Config stack is responsible for setting up AWS Config to write snapshots to S3 and stream changes to SNS.

Template Configuration

Parameters

Parameter Type Description
DestinationUri String The URI for your destination, e.g. s3://bucket-alias/ds101/. S3 URIs must end in a forward slash.
DataAccessPointArn String The access point ARN for your Filedrop.
ConfigDeliveryBucketName String If AWS Config is already enabled in this account and region, provide the S3 bucket snapshots are written to.
IncludeResourceTypes CommaDelimitedList If AWS Config is not enabled in this account and region, provide a list of resource types to collect. Use a wildcard to collect all supported resource types.
ExcludeResourceTypes CommaDelimitedList Exclude a subset of resource types from configuration collection. This parameter can only be set if IncludeResourceTypes is wildcarded.
LogGroupNamePatterns CommaDelimitedList Comma separated list of patterns. If not empty, the lambda function will only apply to log groups that have names that match one of the provided strings based on a case-sensitive substring search.
LogGroupNamePrefixes CommaDelimitedList Comma separated list of prefixes. If not empty, the lambda function will only apply to log groups that start with a provided string.
ExcludeLogGroupNamePatterns CommaDelimitedList Comma separated list of patterns. This paramter is used to filter out log groups from subscription, and supports the use of regular expressions.
MetricStreamFilterUri String S3 URI containing filters for metrics to be collected by CloudWatch Metrics Stream. If empty, no metrics will be collected.
SourceBucketNames CommaDelimitedList A list of bucket names which the forwarder is allowed to read from.
ContentTypeOverrides CommaDelimitedList A list of key value pairs. The key is a regular expression which is applied to the S3 source (/) of forwarded files. The value is the content type to set for matching files. For example, \.json$=application/x-ndjson would forward all files ending in .json as newline delimited JSON files.
NameOverride String Name of IAM role expected by Filedrop. This role will be created as part of this stack, and must therefore be unique within the account.
DebugEndpoint String OpenTelemetry endpoint to send additional telemetry to.

Outputs

Output Description
BucketName Collection Bucket Name. Objects written to this bucket will be forwarded to your destination. This bucket has a strict expiration policy.
TopicArn Collection Topic ARN. Events written to this SNS Topic will be forwarded to your destination. S3 Object Created events may trigger an object copy towards destination.
ForwarderArn Forwarder Function ARN. This is the Lambda function responsible for forwarding objects to Observe.
ForwarderQueueArn Forwarder Queue ARN. Events sent to this queue will be forwarded to Observe. s3:ObjectCreated events will initiate an object copy to destination.
ForwarderRoleArn Forwarder Role ARN. This role will be assumed by the Forwarder Lambda Function in order to write data to destination.
ForwarderLogGroupName Forwarder Log Group Name. This log group contains useful information for debugging the Forwarder Lambda.
LogWriterFirehoseArn LogWriter Kinesis Firehose Delivery Stream ARN. CloudWatch Log Groups subscribed to this Firehose will have their logs batched and written to S3 bucket.
LogWriterDestinationRoleArn ARN for IAM Role to be assumed by CloudWatch for log delivery. This value is required when configuring a subscription towards the Firehose Delivery Stream.
LogWriterFirehoseLogGroupName LogWriter Firehose Log Group Name. These logs may contain useful information for debugging Firehose delivery to S3.
LogWriterSubscriberArn Subscriber Function ARN. This function is responsible for log group discovery, filtering and subscription.
LogWriterSubscriberQueueArn LogWriter Subscriber Queue ARN. This queue is used by the subscriber function to fan out execution of subscription requests.
SubscriberLogGroupName LogWriter Subscriber Log Group Name. This log group contains useful information for debugging the Subscriber function.