This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

What specific URLs are necessary for Amazon / Azure Cloud Monitoring?

stevenstadel over 7 years ago

We must whitelist URLs for Orion to access the internet. What specific URLs are needed for Amazon / Azure cloud monitoring with SAM?

The documentation references "The Orion server requires HTTPS protocol to communicate with Amazon Web Services APIs (CloudWatch, EC2, EBS) to collect metrics."

We found this document that references regions and endpoints but are not sure which ones we need to whitelist.

AWS Regions and Endpoints - Amazon Web Services

What are the necessary URLs for monitoring?

Top Replies

slawomir.muniak over 6 years ago in reply to stevenstadel +1

For Azure Cloud monitoring you need only to add two enpoints: https://login.microsoftonline.com https://management.azure.com On AWS Regions and Endpoints - Amazon Web Services are all possible endpoints…

Parents

0 stevenstadel over 7 years ago

This is what we were able to come up with while testing with Security. We built a white list policy to allow the Orion pollers to access the following URLs over 80/443 via our web proxy:

amazonaws.com
aws.amazon.com
autoscaling.*.amazonaws.com
*.awsstatic.com
*.amazontrust.com
ec2.*.amazonaws.com
events.*.amazonaws.com
monitoring.*.amazonaws.com
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 stevenstadel over 7 years ago

This is what we were able to come up with while testing with Security. We built a white list policy to allow the Orion pollers to access the following URLs over 80/443 via our web proxy:

amazonaws.com
aws.amazon.com
autoscaling.*.amazonaws.com
*.awsstatic.com
*.amazontrust.com
ec2.*.amazonaws.com
events.*.amazonaws.com
monitoring.*.amazonaws.com
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 slawomir.muniak over 6 years ago in reply to stevenstadel

For Azure Cloud monitoring you need only to add two enpoints:
https://login.microsoftonline.com
https://management.azure.com
On AWS Regions and Endpoints - Amazon Web Services are all possible endpoints that can be used for communicating with Amazon.
http://docs.aws.amazon.com/general/latest/gr/rande.html#as_region
http://docs.aws.amazon.com/general/latest/gr/rande.html#cw_region
http://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region
http://docs.aws.amazon.com/general/latest/gr/rande.html#ec2_region
Cancel
Vote Up +1 Vote Down

Cancel