Cloud Account Management¶
In the course of business operations, enterprises often need to use multiple cloud service accounts to meet different business needs. However, when these cloud services experience failures, a decentralized management approach may lead to inefficiencies and increase operational costs for the enterprise.
The "Cloud Account Management feature" consolidates all of an enterprise's cloud service accounts into a unified management system, distinguishing them by the uniqueness of certain configurations under each account. By configuring integrated collectors, independent management is achieved for the cloud services under each account, thereby enabling precise control over business data.
This management method not only simplifies the enterprise's cloud service management process but also aids in quickly identifying and resolving service failures, significantly reducing management costs and improving fault response speed.
Note
This feature currently supports configuration only by workspace owners and managers.
Adding Authorization¶
Currently supports authorization for AWS accounts and Alibaba Cloud accounts.
AWS¶
AWS account types have two authentication methods:
Based on Access Keys¶
- Select region: choose China or overseas as needed;
- Enter the AWS main account ID;
- Input the AWS Access Key and Secret Key;
- Enter the account alias; it will be used for display in Guance, and subsequent data collected from this account will automatically carry this tag;
- Click the Test button, and creation will succeed after passing the test.
Based on Role Authorization¶
- Select region: choose China or overseas as needed;
- Enter the AWS main account ID;
- Input the AWS Access Key and Secret Key;
- Enter the role name under this account;
- Input the account alias; it will be used for display in Guance, and subsequent data collected from this account will automatically carry this tag;
- Click Save. You can also click the Test button to validate the current cloud account information.
Alibaba Cloud¶
Based on Access Keys¶
- Select region: choose China or overseas as needed;
- Enter the Alibaba Cloud main account ID;
- Input the Alibaba Cloud Access Key and Secret Key;
- Enter the account alias; it will be used for display in Guance, and subsequent data collected from this account will automatically carry this tag;
- Click the Test button, and creation will succeed after passing the test.
Managing Authorization¶
All successfully created cloud accounts will be displayed here. You can perform the following actions:
- Quickly filter by type using the top-right corner;
- Directly search for cloud account aliases in the search bar to locate them;
- Delete directly via the settings button;
- Click to enter an account's details for further editing.
Configuring Integration¶
When a cloud account is successfully created, it indicates that the account has been successfully authorized to Guance. Next, you can install integrations as needed under this cloud account to start collecting data.
Note
Different integrations require authorization for different resources. Please grant the appropriate permissions to the cloud account according to the integration documentation requirements. Otherwise, there might be cases where the integration installation succeeds, but data collection fails.
Prerequisite
The DataFlux Func (Automata) has been activated.
Configuring in Cloud Account Information¶
Click to enter the cloud account information detail page > Integrations, where you can view all related integrations under the current account.
Click Install on the right side to enter the automatic installation page:
- The cloud account is automatically filled in;
- Choose the applicable region type as needed;
- The system will automatically identify the metrics included in the current integration script, which you can modify as needed;
- The current filters support
=
andin
operations; - Click Install. After successful installation, continue with the script installation.
Direct Configuration on the Integration Side¶
Prerequisite
- DataFlux Func (Automata) has been activated;
- Cloud account authorization has been configured in the management section.
- Go directly to Integrations and install. On the single integration installation page, multiple cloud accounts can be configured;
- Click Add Cloud Account;
- Check other cloud accounts that need to be configured and configure regions, metrics, and filters;
- Click Install, and the cloud account will be updated to the latest configuration.
Deleting/Uninstalling Integration¶
-
On the cloud account management list page, click , to delete the cloud account. After deletion, data collection for all configured integrations under this cloud account will no longer continue, but already collected data will not be affected.
-
In the cloud account detail page > Integrations, click Uninstall. Data collection for this integration will no longer continue, but already collected data will not be affected.
-
On the integration side, clicking Uninstall will stop data collection for this integration across all AWS cloud accounts. If you only want a specific cloud account to stop data collection, you can make the changes in the cloud account configuration.