# AWS Integration

**URL:** <https://community.dynatrace.com/t/aws-integration/48247>\
**Category:** Cloud platforms\
**Tags:** aws\
**Created:** [October 10, 2024, 9:48am UTC](https://community.dynatrace.com/t/aws-integration/48247 "2024-10-10T09:48:19Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prithvi\_Mandal](https://avatars.discourse-cdn.com/v4/letter/p/8dc957/32.png) [@Prithvi\_Mandal](https://community.dynatrace.com/u/Prithvi_Mandal)\
**Post date:** [October 10, 2024, 9:48am UTC](https://community.dynatrace.com/t/aws-integration/48247/1 "2024-10-10T09:48:19Z")

</div>

Dear Team,

We have two different AWS account one is ‘A’ and another one is ‘B’ , As we know for AWS integration with Dynatrace

we have to deploy ActiveGate on same&nbsp; AWS account, Now my question is if I deploy ActiveGate on A ( AWS Account) then can I use same ActiveGate to integrate with B (AWS account).

Kindly let me know this approach is feasible&nbsp; or not.

Thanks & Regard

Prithvi

---

<div class="post-metadata">

**Author:** ![dawid\_kaszubski](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/dawid_kaszubski/32/34412_2.png) [@dawid\_kaszubski](https://community.dynatrace.com/u/dawid_kaszubski)\
**Post date:** [October 10, 2024, 10:23am UTC](https://community.dynatrace.com/t/aws-integration/48247/2 "2024-10-10T10:23:24Z")

</div>

Hi&nbsp;[@Prithvi\_Mandal](https://community.dynatrace.com/user/78382)&nbsp;,  
Yes, you can definitely use an ActiveGate deployed on the A account to monitor the B account.&nbsp;  
Please remember that you need a DynatraceMonitoringRole in the B account with the A account in the Trust Relationships.&nbsp;  
So, in the A account&nbsp;Dynatrace\_ActiveGate\_role’s permissions should look like that:

```auto
{<br> <span>"Version"</span><span>: </span><span>"2012-10-17"</span><span>,<br></span> <span>"Statement"</span><span>: </span>[<br> {<br> <span>"Action"</span><span>: </span>[<br> <span>"sts:AssumeRole"<br></span>]<span>,<br></span> <span>"Resource"</span><span>: </span>[<br> <span>"arn<img class="lia-deferred-image lia-image-emoji" src="https://community.dynatrace.com/html/@F9676CCDE08B8746467ACFFDC4C9827E/images/emoticons/aws.png" alt=":aws:" title=":aws:">iam::<accountA>:role/Dynatrace_monitoring_role"</span><span>,<br></span> <span>"arn<img class="lia-deferred-image lia-image-emoji" src="https://community.dynatrace.com/html/@F9676CCDE08B8746467ACFFDC4C9827E/images/emoticons/aws.png" alt=":aws:" title=":aws:">iam::<accountB>:role/Dynatrace_monitoring_role"<br></span>]<span>,<br></span> <span>"Effect"</span><span>: </span><span>"Allow"<br></span> }<br> ]<br>}

```

And in the B account&nbsp;DynatraceMonitoringRole’s&nbsp;Trust Relationships should look like:

```auto
{<br> <span>"Version"</span><span>: </span><span>"2012-10-17"</span><span>,<br></span> <span>"Statement"</span><span>: </span>[<br> {<br> <span>"Effect"</span><span>: </span><span>"Allow"</span><span>,<br></span> <span>"Principal"</span><span>: </span>{<br> <span>"AWS"</span><span>: </span>[<br> <span>"arn<img class="lia-deferred-image lia-image-emoji" src="https://community.dynatrace.com/html/@F9676CCDE08B8746467ACFFDC4C9827E/images/emoticons/aws.png" alt=":aws:" title=":aws:">iam::<accountA>:role/Dynatrace_ActiveGate"<br></span>]<br> }<span>,<br></span> <span>"Action"</span><span>: </span><span>"sts:AssumeRole"</span><span>,<br></span> <span>"Condition"</span><span>: </span>{<br> <span>"StringEquals"</span><span>: </span>{<br> <span>"sts:ExternalId"</span><span>: </span><span>"<ExternalId>"<br></span> }<br> }<br> }<br> ]<br>}

```

---

<div class="post-metadata">

**Author:** ![Prithvi\_Mandal](https://avatars.discourse-cdn.com/v4/letter/p/8dc957/32.png) [@Prithvi\_Mandal](https://community.dynatrace.com/u/Prithvi_Mandal)\
**Post date:** [October 10, 2024, 10:25am UTC](https://community.dynatrace.com/t/aws-integration/48247/3 "2024-10-10T10:25:18Z")

</div>

thanks you&nbsp;[@dawid\_kaszubski](https://community.dynatrace.com/user/25915)&nbsp; for your suggestion.

---

<div class="post-metadata">

**Author:** ![p\_devulapalli](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/p_devulapalli/32/41590_2.png) [@p\_devulapalli](https://community.dynatrace.com/u/p_devulapalli)\
**Post date:** [October 10, 2024, 10:26am UTC](https://community.dynatrace.com/t/aws-integration/48247/4 "2024-10-10T10:26:29Z")

</div>

[@Prithvi\_Mandal](https://community.dynatrace.com/user/78382)&nbsp;Here is some documentation you can refer to , look under “Deployment with existing ActiveGate”

> **[Monitor Amazon Web Services with CloudWatch metrics](https://docs.dynatrace.com/docs/ingest-from/amazon-web-services-classic/integrate-with-aws/cloudwatch-metrics)**
>
> Integrate metrics from Amazon CloudWatch.

---

<div class="post-metadata">

**Author:** ![Prithvi\_Mandal](https://avatars.discourse-cdn.com/v4/letter/p/8dc957/32.png) [@Prithvi\_Mandal](https://community.dynatrace.com/u/Prithvi_Mandal)\
**Post date:** [November 24, 2024, 9:33pm UTC](https://community.dynatrace.com/t/aws-integration/48247/5 "2024-11-24T21:33:05Z")

</div>

Hii&nbsp;[@dawid\_kaszubski](https://community.dynatrace.com/user/25915)&nbsp;,

Some confusion that , activegate deployed on A account already in use to monitored other AWS account (ie C account. but I want to use same activegate to monitored B account.

Please find attached template , Is there any need to change this template.  
[# Copyright 2022 Dynatrace LLC.txt](https://community.dynatrace.com/uploads/short-url/oUllSLSsBjZ6yUF3zErJVPnBkdl.txt) (3.19 KB)

---

<div class="post-metadata">

**Author:** ![dawid\_kaszubski](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/dawid_kaszubski/32/34412_2.png) [@dawid\_kaszubski](https://community.dynatrace.com/u/dawid_kaszubski)\
**Post date:** [November 26, 2024, 5:29pm UTC](https://community.dynatrace.com/t/aws-integration/48247/6 "2024-11-26T17:29:32Z")

</div>

Hi&nbsp;[@Prithvi\_Mandal](https://community.dynatrace.com/user/78382)&nbsp;, the CloudFormation template you attached is tailored to use only one `DynatraceMonitoringRole`.&nbsp; It’s defined in line :49.  
`- !Sub ‘arn:aws:iam::${MonitoredAccountID}:role/${MonitoringRoleName}’  
I’ve attached an example template for two accounts. If you want to monitor more accounts, you can configure it in the same manner.&nbsp;  
[# Copyright 2022 Dynatrace LLC.txt](https://community.dynatrace.com/uploads/short-url/1HHBI8aezqSLyBpqLKMWjfPZl1N.txt) (3.8 KB)