AWS PrivateLink Endpoint Services

Collect AWS PrivateLink Endpoint Services monitoring data.

Configuration¶

Install Func¶

We recommend enabling hosted Func under Integration - Extensions in TrueWatch. All prerequisites are installed automatically; continue with the script installation.

If deploying Func manually, refer to Manual Deployment of Func

Activate Script¶

Note: Prepare an AWS AK that meets the requirements. For simplicity, you can grant the global read-only permission ReadOnlyAccess directly.

Activate Scripts in Hosted Func¶

1. Log in to the TrueWatch console
2. Click the 【Integration】 menu and select 【Cloud Account Management】
3. Click 【Add Cloud Account】, select 【AWS】, and fill in the required information on the interface. If you have already configured the cloud account information before, ignore this step
4. Click 【Test】, and if the test is successful, click 【Save】. If the test fails, please check if the relevant configuration information is correct and test again
5. Click 【Cloud Account Management】, and you can see the added cloud account in the list. Click the corresponding cloud account to enter the details page
6. Click 【Integration】 on the cloud account details page, find AWS PrivateLink Endpoint Services in the Not Installed list and click 【Install】 to open the installation form.

Manual Activation Script¶

1. Log in to the Func console, click 【Script Market】, open the TrueWatch script market and search for integration_aws_vpc_endpoint_service.
2. Click 【Install】 and enter AWS AK ID, AK Secret, and the account name.
3. Click 【Deploy Startup Script】 to create the Startup script set and configure its startup scripts automatically. Set regions to the actual regions and metrics in cloudwatch_configs.targets to ActiveConnections, BytesProcessed, EndpointsCount, NewConnections, RstPacketsSent. Then publish and enable automatic triggering.
4. After enabling the script, open 【Management / Automatic Trigger Configuration】 to view its automatic trigger configuration. Click 【Execute】 to run it immediately without waiting for the scheduled time. After a short wait, review the task records and logs.

Verification¶

1. Under 【Management / Automatic Trigger Configuration】, confirm that the task has an automatic trigger configuration. Review its task records and logs for errors.
2. In TrueWatch, check [Infrastructure / Custom] for asset information.
3. In TrueWatch, check 【Metrics】 for the corresponding monitoring data.

Metrics¶

After configuring AWS CloudWatch, the default metrics are listed below. You can configure additional metrics. The measurement is aws_AWS/PrivateLinkServices. AWS PrivateLink Endpoint Services metric details