CREATIVE CHAOS   ▋ blog

AWS Monitoring in Check_MK

PUBLISHED ON 20/03/2019 — EDITED ON 11/12/2023 — SYSOPS

Intro

A new addition to Check_MK is the ability to monitor AWS infrastructure and cost.

Updating Check_MK

You need at least Check_MK version 1.5.0. We will pull the new package and install it on Debian instance.

# wget https://mathias-kettner.de/support/1.5.0p12/check-mk-raw-1.5.0p12_0.stretch_amd64.deb

# dpkg -i check-mk-raw-1.5.0p12_0.stretch_amd64.deb

# su - sitename

OMD[sitename]:~$ omd stop

OMD[sitename]:~$ omd update

OMD[sitename]:~$ omd start

Monitoring

Follow the official instructions here.

The instructions have one error though:

CRIT - AWSSectionsUSEast: An error occurred (AccessDeniedException) when calling the GetCostAndUsage operation: User: arn:aws:iam::9999999:user/check-mk is not authorized to perform: ce:GetCostAndUsage on resource: arn:aws:ce:us-east-1:9999999:/GetCostAndUsageCRIT, AWSSectionsGeneric: No exceptions

If you stumble upon it, edit the created IAM policy in AWS, by adding the "ce:*":

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Stmt333333",
            "Effect": "Allow",
            "Action": [
                "aws-portal:ViewAccount",
                "aws-portal:ViewBilling",
                "aws-portal:ViewPaymentMethods",
                "aws-portal:ViewUsage",
                "ce:*"
            ],
            "Resource": [
                "*"
            ]
        }
    ]
}

The issue is observed in other solutions that use Python boto3 library (AWS library).