Fleet AWS integration - looking for more info howto setup (IAM role preferred)

Elastic Stack Beats
4

Thanks for all the information! For elastic agent, configuration is defined in a policy. For example: when you add aws integration, you can choose role ARN instead of credential profile name in settings:

Screen Shot 2021-03-24 at 3.00.20 PM
Screen Shot 2021-03-24 at 3.00.20 PM653×757 37.9 KB

After adding the integration, default agent policy looks like this:

id: 5bc5b9e0-8bad-11eb-924a-bdee80acd973
revision: 3
outputs:
  default:
    type: elasticsearch
    hosts:
      - 'http://elasticsearch:9200'
agent:
  monitoring:
    enabled: true
    use_output: default
    logs: true
    metrics: true
inputs:
  - id: b5c89356-90c4-4860-aff6-2547e3296208
    name: aws-1
    revision: 1
    type: s3
    use_output: default
    meta:
      package:
        name: aws
        version: 0.5.1
    data_stream:
      namespace: default
    streams:
      - id: s3-aws.cloudwatch_logs-b5c89356-90c4-4860-aff6-2547e3296208
        data_stream:
          dataset: aws.cloudwatch_logs
          type: logs
        queue_url: test_queue_url
        endpoint: amazonaws.com
        role_arn: test_arn
        processors:
          - add_fields:
              target: ''
              fields:
                ecs.version: 1.5.0
fleet:
  kibana:
    protocol: http
    hosts:
      - 'kibana:5601'
1 Like