AWS IA Ext Errors

Products

• CA Application Performance Management SaaS

Issue/Introduction

We are successfully collecting metrics from AWS using the IA Ext.  I am not familiar with AWS or the metrics being accessed. Please verify that it is setup correctly and that APM is receiving the intended metrics from AWS.

The reason I ask is because of the errors in the log.  I will upload errors after created ticket.

 

IA version below.  Agent currently reporting to DX SaaS APM via CloudProxy.

SuperDomain|ServerA|Infrastructure|Agent:Build and Release

Release 21.6.0.33 ( 990033 )

Environment

Release : SAAS

Component : Integration with APM

Resolution

The log shows that the secret key was set.

 [INFO] [IntroscopeAgent.InfrastructureAgent] introscope.agent.aws.profiles.aws.secretKey = *****

However, no secret key was used or configured.

Also check glue_schema.json to see if there is a space as showing below. If yes, please remove it.

 

Since no space was found, further investigate the logs.  

 

InvalidSignatureException was not seen in the new logs, only AccessDeniedException for glue:GetJob

 

 [ERROR] [IntroscopeAgent.RESTMon] [AsyncHttpClient-3-7 ResponseHandler] [[email protected]@us-east-1~~glue~678320053447], awsGlueGetCurrentJobDetails : Failed : HTTP error code : 400 
    https://glue.us-east-1.amazonaws.com/?testparamGetJob=idd-tcr-prod-glue-copy-to-association-usea1-1
    {"__type":"AccessDeniedException","Message":"User: arn:aws:sts::678320053447:assumed-role/CAAPMRole/session1 is not authorized to perform: glue:GetJob on resource: arn:aws:glue:us-east-1:678320053447:job/idd-tcr-prod-glue-copy-to-association-usea1-1 because no identity-based policy allows the glue:GetJob action"}, retry :0

 

 

Please double check and make sure glue:GetJob permission is added