AWS KMS

Collect successful cryptographic operation request metrics published by AWS Key Management Service (KMS) in the AWS/KMS namespace.

Configuration¶

Install Func¶

We recommend enabling hosted Func under TrueWatch Integrations - Extensions. All prerequisites are installed automatically; continue with the script installation.

To deploy Func yourself, see Deploy Func Yourself

Activate Script¶

Note: Prepare an AWS AK that meets the requirements. For simplicity, you can grant the global read-only permission ReadOnlyAccess directly.

Activate the Hosted Script¶

1. Log in to the TrueWatch console.
2. Click 【Integrations】 and select 【Cloud Account Management】.
3. Click 【Add Cloud Account】, select 【AWS】, and enter the required information. Skip this step if the cloud account has already been configured.
4. Click 【Test】, then click 【Save】 if the test succeeds. If it fails, check the configuration and test again.
5. Find the added cloud account in 【Cloud Account Management】 and click it to open its details page.
6. Click 【Integrations】 on the cloud account details page, find AWS KMS under Not Installed, and click 【Install】. Complete the installation in the dialog.

Activate the Script Manually¶

1. Log in to the Func console, click 【Script Market】, open the TrueWatch script market, and search for integration_aws_kms.
2. Click 【Install】 and enter AWS AK ID, AK Secret, and the account name.
3. Click 【Deploy Startup Script】. The system automatically creates the Startup script set and configures the startup script.
4. After activation, find the automatic trigger configuration under 「Management / Automatic Trigger Configuration」. Click 【Execute】 to run it immediately without waiting for the schedule. After a short wait, review the task records and logs.

Verification¶

1. Under 「Management / Automatic Trigger Configuration」, confirm that the task is configured and review its records and logs for permission or API errors.
2. In TrueWatch 「Metrics」, open the aws_AWS/KMS measurement and confirm the monitoring data.

Metrics¶

The measurement is aws_AWS/KMS.