chaordic/ansible-role-aws-alarms

Ansible Role to manage AWS CloudWatch Alarms

Role Name

Setup AWS CloudWatch Alarms.

LIMITATION:

• Setup EC2 instances as a resources and lookup the tag ansible_host in all instances of the default region.
• Setup ELB Target Group Alarms

Requirements

Ansible >= 2.3

Role Variables

aws_alarms: is the list of Alarm definition. See more at documentation page.

Dependencies

TODO

Example Playbook

- hosts: servers
  vars:
    aws_alarms:
      - name: CPU_Utilization
        filter_type: "ec2_fact"
        filter_ec2_fact:
          "tag:ansible_host": "lookup-in-tag-ansible_host"
        region: us-east-1
        metric: "CPUUtilization"
        namespace: "AWS/EC2"
        statistic: Average
        comparison: ">="
        threshold: 75.0
        period: 60
        evaluation_periods: 3
        unit: "Percent"
        alarm_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        insufficient_data_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        ok_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]

      - name: CPU_Utilization
        ec2_resources:
          - id: i-ffffffffffffffff
            name: myInstance1
          - id: i-0000000000000000
            name: myInstance2
        region: us-east-1
        metric: "CPUUtilization"
        namespace: "AWS/EC2"
        statistic: Average
        comparison: ">="
        threshold: 75.0
        period: 60
        evaluation_periods: 3
        unit: "Percent"
        alarm_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        insufficient_data_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        ok_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]

      - name: tg-alarm-prefix-Unhealthy-Hosts
        namespace: "AWS/ApplicationELB"
        resources:
          - name: "name-sufix-alarm"
            dimensions:
              LoadBalancer: my-elbv2-name/ffffffffffffffff
              TargetGroup: targetgroup/my-tg-name/ffffffffffffffff
        region: us-east-1
        metric: "UnHealthyHostCount"
        statistic: Average
        comparison: ">="
        threshold: 1
        period: 60
        evaluation_periods: 10
        unit: "Count"
        alarm_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        insufficient_data_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        ok_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]


      - name: aws-cloudfront-low-requests
        namespace: "AWS/CloudFront"
        resources:
          - name: "distribution-name"
            dimensions:
              DistributionId: EF00000000000
              Region: Global
        region: us-east-1
        metric: "Requests"
        statistic: Sum
        comparison: "<="
        threshold: 100
        period: 60
        evaluation_periods: 3
        unit: "Count"
        alarm_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        insufficient_data_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        ok_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]

      - name: aws-cloudfront-high-5xx-error-rate
        namespace: "AWS/CloudFront"
        resources:
          - name: "distribution-name"
            dimensions:
              DistributionId: EF00000000000
              Region: Global
        region: us-east-1
        metric: "5xxErrorRate"
        statistic: Average
        comparison: ">="
        threshold: 0.5
        period: 60
        evaluation_periods: 3
        unit: "Count"
        alarm_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        insufficient_data_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]
        ok_actions: ["arn:aws:sns:us-east-1:<AWS_ACCOUNT_ID>:<SNS_ALERT>"]



  roles:
     - { role: aws-alarms.chaordic }

License

GPLv3

Author Information

Cloud Operations Team, Linx+Neemu+Chaordic