クラウド向け APTARE IT Analytics Data Collector インストールガイド

APTARE IT Analytics AWS 収集用のカスタム AWS ポリシーの例

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Action": [
                "s3:GetObject",
                "s3:ListBucket"
            ],
            "Effect": "Allow",
            "Resource": [
                "arn:aws:s3:::[Billing Bucket Name]",
                "arn:aws:s3:::[Billing Bucket Name]/*"
            ]
        },
        {
            "Action": [
                "ec2:DescribeAccountAttributes",
                "ec2:DescribeAddresses",
                "ec2:DescribeAvailabilityZones",
                "ec2:DescribeHosts",
                "ec2:DescribeImages",
                "ec2:DescribeInstances",
                "ec2:DescribeNetworkInterfaces",
                "ec2:DescribeRegions",
                "ec2:DescribeSnapshots",
                "ec2:DescribeSubnets",
                "ec2:DescribeTags",
                "ec2:DescribeVolumes",
                "ec2:DescribeVpcs",
                "iam:GetAccountAuthorizationDetails",
                "iam:GetUser",
                "iam:ListAccountAliases",
                "s3:GetBucketLocation",
                "s3:GetBucketLifecycleConfiguration",
                "s3:GetBucketLoggingConfiguration",
                "s3:GetBucketPolicy",
                "s3:GetBucketReplicationConfiguration",
                "s3:GetBucketTaggingConfiguration",
                "s3:GetBucketVersioningConfiguration",
                "s3:HeadBucket",
                "s3:ListAllMyBuckets",
                "s3:ListBucket",
                "s3:ListBucketVersions"
            ],
													"Action": ["iam:*",
              "organizations:DescribeAccount",
              "organizations:DescribeOrganization",
              "organizations:DescribeOrganizationalUnit",
              "organizations:DescribePolicy",
              "organizations:ListChildren",
              "organizations:ListParents",
              "organizations:ListPoliciesForTarget",
              "organizations:ListRoots",
              "organizations:ListPolicies",
              "organizations:ListTargetsForPolicy"
        ],													
            "Effect": "Allow",
            "Resource": "*"
        }
    ]
}