AWS Account Integrations with Dynatrace SaaS: "missing permission" error

sivart_89 — Mon, 07 Nov 2022 09:53:21 GMT

For all of the AWS accounts I have added into Dynatrace to collect CloudWatch metrics I see the below even though the IAM policy we have does have that permission. We only have AWS accounts in us-east-1 and us-east-2 and deny any traffic trying to go elsewhere. Would this be why I am seeing this error?

One of our customers has S3 buckets in his account but is not seeing anything in Dynatrace even though the policy has that permission and within Dynatrace his account is setup as the below. I'm wondering if we aren't seeing S3 metrics because we don't allow access to all regions. Does Dynatrace require open access to all regions to collect any S3 metrics?

Re: AWS Account Integrations with Dynatrace SaaS: "missing permission" error

dawid_kaszubski — Mon, 07 Nov 2022 15:02:15 GMT

@sivart_89 wrote:
We only have AWS accounts in us-east-1 and us-east-2 and deny any traffic trying to go elsewhere. Would this be why I am seeing this error?

Most probably, yes. This warning is raised when the AWS Monitoring module gets an AccessDenied or Unauthorized response.

@sivart_89 wrote:

One of our customers has S3 buckets in his account but is not seeing anything in Dynatrace even though the policy has that permission and within Dynatrace his account is setup as the below. I'm wondering if we aren't seeing S3 metrics because we don't allow access to all regions. Does Dynatrace require open access to all regions to collect any S3 metrics?

Currently, Dynatrace AWS monitoring supports only Amazon S3 request metrics. https://docs.aws.amazon.com/AmazonS3/latest/userguide/metrics-dimensions.html#s3-request-cloudwatch-metrics
By default, request metrics aren't reported. The customer needs to enable them in the AWS S3 console to have them reported.
Last paragraph in Dynatrace S3 monitoring documentation:
https://www.dynatrace.com/support/help/how-to-use-dynatrace/infrastructure-monitoring/cloud-platform-monitoring/amazon-web-services-monitoring/aws-supporting-service-metrics/simple-storage-service#prerequisites

topic Re: AWS Account Integrations with Dynatrace SaaS: "missing permission" error in Cloud platforms

AWS Account Integrations with Dynatrace SaaS: "missing permission" error

Re: AWS Account Integrations with Dynatrace SaaS: "missing permission" error