AWS VPC Endpoint
The Metrics displayed for AWS VPC Endpoint include the number of concurrent active connections, the number of bytes exchanged between the endpoint and the endpoint service, aggregated bidirectionally, the number of new connections established through this endpoint, the number of packets dropped by this endpoint, the number of RST packets received by this endpoint, etc.
Configuration¶
Install Func¶
It is recommended to activate the TrueWatch Integration - Extensions - DataFlux Func (Automata): All prerequisites are automatically installed, please proceed with the script installation.
If you want to deploy Func yourself, refer to Self-deploy Func
Install Script¶
Note: Please prepare the required Amazon AK in advance (for simplicity, you can directly grant global read-only permissions
ReadOnlyAccess
)
Hosted Version Activation Script¶
- Log in to the TrueWatch console
- Click on the 【Integration】 menu, select 【Cloud Account Management】
- Click on 【Add Cloud Account】, select 【AWS】, and fill in the required information on the interface. If you have already configured the cloud account information before, you can ignore this step
- Click on 【Test】, and if the test is successful, click on 【Save】. If the test fails, please check whether the relevant configuration information is correct and retest
- Click on 【Cloud Account Management】, and you can see the added cloud account in the list. Click on the corresponding cloud account to enter the details page
- Click on the 【Integration】 button on the cloud account details page, find
AWS VPC Endpoint
under theNot Installed
list, and click on the 【Install】 button. The installation interface will pop up for installation.
Manual Activation Script¶
-
Log in to the Func console, click on 【Script Market】, enter the TrueWatch script market, and search for
integration_aws_vpc_endpoint
-
Click on 【Install】, and enter the corresponding parameters: AWS AK ID, AK Secret, and account name.
-
Click on 【Deploy Startup Script】, the system will automatically create the
Startup
script set and automatically configure the corresponding startup scripts. -
After activation, you can see the corresponding automatic trigger configuration in 「Manage / Automatic Trigger Configuration」. Click on 【Execute】 to immediately execute it once without waiting for the scheduled time. Wait for a moment, and you can view the execution task records and corresponding logs.
Verification¶
- Confirm in 「Manage / Automatic Trigger Configuration」 whether the corresponding task has the corresponding automatic trigger configuration, and you can also check the corresponding task records and logs to see if there are any exceptions
- In TrueWatch, check if the asset information exists in 「Infrastructure / Custom」
- In TrueWatch, check if there is corresponding monitoring data in 「Metrics」
Metrics¶
After configuring Amazon CloudWatch, the default Measurement is as follows. You can collect more Metrics through configuration:
Amazon CloudWatch AWS Simple Notification Service Metrics Details
Metric Name | Description | Unit | Valid Statistics | Dimensions |
---|---|---|---|---|
ActiveConnections |
The number of concurrent active connections. This includes connections in the SYN_SENT and ESTABLISHED states | Count | Average, Maximum, Minimum | EndpointType, ServiceName, VPCEndpointId, VPCId EndpointType, ServiceName, SubnetId, VPCEndpointId, VPCId |
BytesProcessed |
The number of bytes exchanged between the endpoint and the endpoint service, aggregated bidirectionally. This is the number of bytes that the endpoint owner needs to pay for | Bytes | Average, Sum, Maximum, Minimum | EndpointType, ServiceName, VPCEndpointId, VPCId EndpointType, ServiceName, SubnetId, VPCEndpointId, VPCId |
NewConnections |
The number of new connections established through this endpoint | Count | Average, Sum, Maximum, Minimum | EndpointType, ServiceName, VPCEndpointId, VPCId EndpointType, ServiceName, SubnetId, VPCEndpointId, VPCId |
PacketsDropped |
The number of packets dropped by this endpoint. This metric may not capture all packet drops. An increase in value may indicate that the endpoint or endpoint service is not functioning properly | Count | Average, Sum, Maximum | EndpointType, ServiceName, VPCEndpointId, VPCId EndpointType, ServiceName, SubnetId, VPCEndpointId, VPCId |
RstPacketsReceived |
The number of RST packets received by this endpoint. An increase in value may indicate that the endpoint service is not functioning properly | Count | Average, Sum, Maximum | EndpointType, ServiceName, VPCEndpointId, VPCId EndpointType, ServiceName, SubnetId, VPCEndpointId, VPCId |