Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support cross account log collection through IAM roles #31810

Closed
gsc2001 opened this issue Mar 18, 2024 · 3 comments
Closed

Support cross account log collection through IAM roles #31810

gsc2001 opened this issue Mar 18, 2024 · 3 comments
Labels

Comments

@gsc2001
Copy link

gsc2001 commented Mar 18, 2024

Component(s)

receiver/awscloudwatch

Is your feature request related to a problem? Please describe.

I want to do cross account observability using cross account iam roles.

Describe the solution you'd like

We can support cross account collection of logs through cross account IAM roles by using STS assumeRole option. On the implementation side this can be done by creating a different logsReceiver instance for each roleARN.

Describe alternatives you've considered

Although AWS supports cross account observability but the setup has following problems:

  1. Requires monitoring account to know all the source accounts at infra level. To add new source account one would need to do setup at infra level again, whereas for cross account roles you can do so just by creating relevant role in source account.
  2. Traces & events are paid through cross account observability, hence difficult to have a system with uniform cross account setup.

Additional context

No response

@gsc2001 gsc2001 added enhancement New feature or request needs triage New item requiring triage labels Mar 18, 2024
Copy link
Contributor

Pinging code owners:

See Adding Labels via Comments if you do not have permissions to add labels yourself.

Copy link
Contributor

This issue has been inactive for 60 days. It will be closed in 60 days if there is no activity. To ping code owners by adding a component label, see Adding Labels via Comments, or if you are unsure of which component this issue relates to, please ping @open-telemetry/collector-contrib-triagers. If this issue is still relevant, please ping the code owners or leave a comment explaining why it is still relevant. Otherwise, please close it.

Pinging code owners:

See Adding Labels via Comments if you do not have permissions to add labels yourself.

@github-actions github-actions bot added the Stale label May 20, 2024
Copy link
Contributor

This issue has been closed as inactive because it has been stale for 120 days with no activity.

@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale Jul 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant