IAM role to prometheus instance

[ashok....@gslab.com]

Hello Guys,

Can I assign EC2 Read Only Access IAM role to prometheus instance instead of using AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY  keys in ec2_sd_config ?

Thanks,

[Brian Brazil]

On 6 April 2017 at 12:11, ashok...@gmail.com <ashok....@gslab.com> wrote:

Hello Guys,

Can I assign EC2 Read Only Access IAM role to prometheus instance instead of using AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY  keys in ec2_sd_config ?

Yes, it should just work. See https://www.robustperception.io/automatically-monitoring-ec2-instances/

 

--

Brian Brazil

www.robustperception.io

[dgo...@gmail.com]

Example in link contains keys ....

scrape_configs:
  - job_name: 'node'
    ec2_sd_configs:
      - region: eu-west-1
        access_key: PUT_THE_ACCESS_KEY_HERE
        secret_key: PUT_THE_SECRET_KEY_HERE
        port: 9100

[kayanum...@donuts.ne.jp]

Does this answer really solve question? As he says, he'd like to use IAM Instance role, and he doesn't want to use AWS_ACCESS_KEY and AWS_SECRET_ACCESS_KEY. This article describe a way to use access_key and secret_key, so this doesn't works.

NOTE: I'm having same question!

2017年4月6日木曜日 20時57分40秒 UTC+9 Brian Brazil:

[Moses Moore]

The documentation ( https://prometheus.io/docs/prometheus/latest/configuration/configuration/#ec2_sd_config ) says:

```

# AWS Role ARN, an alternative to using AWS API keys.
[ role_arn: <string> ]

```

What happens when you use this instead of "access_key" and "secret_key" ?