AWS Monitoring in Check_MK

PUBLISHED ON 20/03/2019 — EDITED ON 11/12/2023 — SYSOPS


A new addition to Check_MK is the ability to monitor AWS infrastructure and cost.

Updating Check_MK

You need at least Check_MK version 1.5.0. We will pull the new package and install it on Debian instance.

# wget

# dpkg -i check-mk-raw-1.5.0p12_0.stretch_amd64.deb

# su - sitename

OMD[sitename]:~$ omd stop

OMD[sitename]:~$ omd update

OMD[sitename]:~$ omd start


Follow the official instructions here.

The instructions have one error though:

CRIT - AWSSectionsUSEast: An error occurred (AccessDeniedException) when calling the GetCostAndUsage operation: User: arn:aws:iam::9999999:user/check-mk is not authorized to perform: ce:GetCostAndUsage on resource: arn:aws:ce:us-east-1:9999999:/GetCostAndUsageCRIT, AWSSectionsGeneric: No exceptions

If you stumble upon it, edit the created IAM policy in AWS, by adding the "ce:*":

    "Version": "2012-10-17",
    "Statement": [
            "Sid": "Stmt333333",
            "Effect": "Allow",
            "Action": [
            "Resource": [

The issue is observed in other solutions that use Python boto3 library (AWS library).

See Also