|
Configuration of AlibabaRAMTest
The Resource Access Management-RAM test enables you to determine the number and names of users, groups, custom policies, and roles created using RAM for the monitored Alibaba cloud account.
The default parameters associated with this test are as follows:
This test makes REST API requests to the Alibaba cloud to pull the metrics. For this purpose, the test needs to be configured with an ACCESSKEY PAIR. An ACCESSKEY PAIR is typically used to call an operation of an Alibaba Cloud service. It is also used to initiate an API request or use a cloud service SDK to manager cloud resources. An ACCESSKEY PAIR is characterized by an ACCESSKEY ID and an ACCESSKEY SECRET. The AccessKey ID is used to identify a user/cloud account. The AccessKey Secret is used to verify a user/cloud account
The first step to configuring the eG agent with an ACCESSKEY PAIR is to create an ACCESSKEY PAIR for the target cloud acount. To achieve this, follow the steps below:
Log on to the RAM console by using an Alibaba Cloud account.
In the left-side navigation pane, click USERS under IDENTITIES.
On the USERS page, click the username of the RAM user for which you want to create an AccessKey pair in the USER LOGON NAME/DISPLAY NAME column.
On the page that appears, click Create AccessKey in the User AccessKeys section.
Note:
You must enter a verification code if you create an AccessKey pair for the first time.
Click Close.
Note:
The AccessKey secret is displayed only when you create an AccessKey pair.
If the AccessKey pair is leaked or lost, you must create a new one. You can create a maximum of two AccessKey pairs.
Make note of the AccessKey ID and AccessKey secret, once they are displayed.
Then, configure the ALIBABA ACCESS KEY parameter of the test with the ACCESSKEY ID, and the ALIBABA SECRET KEY parameter with the ACCESSKEY SECRET you made note of.
If you failed to make note of the ACCESSKEY ID and ACCESSKEY SECRET at the time of creating the ACCESSKEY PAIR, then you can obtain the same at a later point in time. Similarly, if an ACCESSKEY PAIR pre-exists for the target cloud account, then you do not have to create another one. Instead, you can obtain the ACCESSKEY ID and ACCESSKEY SECRET of the existing ACCESSKEY PAIR and configure the eG agent with the same. For this, follow the steps below:
Use an Alibaba Cloud account to log on to the Alibaba Cloud Management console.
Move the pointer over the profile picture in the upper-right corner, and click AccessKey.
In the Security Tips message that appears, click Continue to manage AccessKey. AccessKey ID and AccessKey Secret are displayed.
Make note of the displayed ID and secret.
Then, configure the ALIBABA ACCESS KEY parameter of the test with the ACCESSKEY ID, and the ALIBABA SECRET KEY parameter with the ACCESSKEY SECRET you made note of.
To make diagnosis more efficient and accurate, the eG suite embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the DETAILED DIAGNOSIS capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option.
The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:
If multiple components of the same component type are awaiting configuration, then an APPLY TO OTHER COMPONENTS check box will appear in this page. Clicking on this check box will allow you to apply the configuration to all/selected components of that type.
Once the necessary values have been provided, clicking on the UPDATE button will register the changes made.
When changing the configuration for specific servers, a “*” beside the text box corresponding to the parameter signifies that these values have to be manually configured by the user. The parameter values that require to be configured will typically be prefixed with a “$” or contain a series of “*”. A value of “none” in the parameter value indicates that the corresponding parameter value can be changed if required.
|