上記、「AWS Hands-on for Beginners 監視編 サーバーのモニタリングの基本を学ぼう」 をAWS CLIでやってみる
ハンズオンから引用
1.CloudFormationでリソースの作成
テンプレートファイルはハンズオンページからダウンロードしたものを使用。
インスタンス作成時にエラーになるため、テンプレートファイル内のRDSのインスタンスはdb.t2.microからdb.t3.microに変更
変数設定
コマンド
# スタック名
STACK_NAME="monitoring-1"
echo ${STACK_NAME}
# テンプレートファイル名
TEMPLATE_BODY="monitoring-1.yaml"
echo ${TEMPLATE_BODY}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ # スタック名
[cloudshell-user@ip-10-132-88-36 ~]$ STACK_NAME="monitoring-1"
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${STACK_NAME}
monitoring-1
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # テンプレートファイル名
[cloudshell-user@ip-10-132-88-36 ~]$ TEMPLATE_BODY="monitoring-1.yaml"
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${TEMPLATE_BODY}
monitoring-1.yaml
スタック作成
コマンド
aws cloudformation create-stack \
--stack-name ${STACK_NAME} \
--template-body file://${TEMPLATE_BODY} \
--capabilities CAPABILITY_NAMED_IAM
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudformation create-stack \
> --stack-name ${STACK_NAME} \
> --template-body file://${TEMPLATE_BODY} \
> --capabilities CAPABILITY_NAMED_IAM
{
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d"
}
スタックの出力確認
コマンド
aws cloudformation describe-stacks --stack-name ${STACK_NAME}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudformation describe-stacks --stack-name ${STACK_NAME}
{
"Stacks": [
{
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"StackName": "monitoring-1",
"Description": "AWS Hands-on for Beginners monitoing-1 template",
"Parameters": [
{
"ParameterKey": "RDSInstanceType",
"ParameterValue": "db.t3.micro"
},
{
"ParameterKey": "EC2InstanceType",
"ParameterValue": "t2.micro"
},
{
"ParameterKey": "DBUser",
"ParameterValue": "dbmaster"
},
{
"ParameterKey": "DBPassword",
"ParameterValue": "****"
},
{
"ParameterKey": "EC2AMI",
"ParameterValue": "/aws/service/ami-amazon-linux-latest/amzn2-ami-hvm-x86_64-gp2",
"ResolvedValue": "ami-029dc392355a76964"
}
],
"CreationTime": "2024-06-22T23:21:52.045000+00:00",
"RollbackConfiguration": {},
"StackStatus": "CREATE_COMPLETE",
"DisableRollback": false,
"NotificationARNs": [],
"Capabilities": [
"CAPABILITY_NAMED_IAM"
],
"Outputs": [
{
"OutputKey": "PrivateSubnet1",
"OutputValue": "subnet-04b281a734ba8c075",
"Description": "PrivateSubnet 1"
},
{
"OutputKey": "PrivateSubnet2",
"OutputValue": "subnet-06f261f48f7beae0f",
"Description": "PrivateSubnet 2"
},
{
"OutputKey": "EC2WebServer02",
"OutputValue": "i-02cee7d18cb05c8e9"
},
{
"OutputKey": "EC2WebServer01",
"OutputValue": "i-0b8d540d2dc6e0497"
},
{
"OutputKey": "EC2WebServer02DNS",
"OutputValue": "ec2-54-238-239-91.ap-northeast-1.compute.amazonaws.com"
},
{
"OutputKey": "VPCID",
"OutputValue": "vpc-09fe2194c2d22f586",
"Description": "VPC ID"
},
{
"OutputKey": "EC2WebServer01DNS",
"OutputValue": "ec2-52-192-9-168.ap-northeast-1.compute.amazonaws.com"
},
{
"OutputKey": "FrontLBEndpoint",
"OutputValue": "monitoring-1-elb-182076190.ap-northeast-1.elb.amazonaws.com"
},
{
"OutputKey": "PublicSubnet2",
"OutputValue": "subnet-065d757166972e0c9",
"Description": "PublicSubnet 2"
},
{
"OutputKey": "RDSEndpointAddress",
"OutputValue": "monitoring-1-rds.clacqicsiqrt.ap-northeast-1.rds.amazonaws.com"
},
{
"OutputKey": "PublicSubnet1",
"OutputValue": "subnet-08cda4950b87852d6",
"Description": "PublicSubnet 1"
}
],
"Tags": [],
"EnableTerminationProtection": false,
"DriftInformation": {
"StackDriftStatus": "NOT_CHECKED"
}
}
]
}
リソース物理IDの確認
コマンド
aws cloudformation describe-stack-resources --stack-name ${STACK_NAME}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudformation describe-stack-resources --stack-name ${STACK_NAME}
{
"StackResources": [
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "CFnVPC",
"PhysicalResourceId": "vpc-09fe2194c2d22f586",
"ResourceType": "AWS::EC2::VPC",
"Timestamp": "2024-06-22T23:22:07.508000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "CFnVPCIGW",
"PhysicalResourceId": "igw-05d3adcc9cd9d9759",
"ResourceType": "AWS::EC2::InternetGateway",
"Timestamp": "2024-06-22T23:22:11.878000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "CFnVPCIGWAttach",
"PhysicalResourceId": "IGW|vpc-09fe2194c2d22f586",
"ResourceType": "AWS::EC2::VPCGatewayAttachment",
"Timestamp": "2024-06-22T23:22:10.755000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "DBInstance",
"PhysicalResourceId": "monitoring-1-rds",
"ResourceType": "AWS::RDS::DBInstance",
"Timestamp": "2024-06-22T23:34:59.512000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "DBSubnetGroup",
"PhysicalResourceId": "monitoring-1-dbsubnetgroup-f2xnw5qizmae",
"ResourceType": "AWS::RDS::DBSubnetGroup",
"Timestamp": "2024-06-22T23:22:13.573000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "EC2WebServer01",
"PhysicalResourceId": "i-0b8d540d2dc6e0497",
"ResourceType": "AWS::EC2::Instance",
"Timestamp": "2024-06-22T23:25:00.719000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "EC2WebServer02",
"PhysicalResourceId": "i-02cee7d18cb05c8e9",
"ResourceType": "AWS::EC2::Instance",
"Timestamp": "2024-06-22T23:24:50.409000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "FrontLB",
"PhysicalResourceId": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:loadbalancer/app/monitoring-1-elb/c147aef4db266283",
"ResourceType": "AWS::ElasticLoadBalancingV2::LoadBalancer",
"Timestamp": "2024-06-22T23:24:49.195000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "FrontLBListener",
"PhysicalResourceId": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:listener/app/monitoring-1-elb/c147aef4db266283/f8e0379a181bee32",
"ResourceType": "AWS::ElasticLoadBalancingV2::Listener",
"Timestamp": "2024-06-22T23:25:10.177000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "FrontLBTargetGroup",
"PhysicalResourceId": "arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:targetgroup/monitoring-1-tg/0726cfe1b71c5746",
"ResourceType": "AWS::ElasticLoadBalancingV2::TargetGroup",
"Timestamp": "2024-06-22T23:25:08.271000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "IAMInstanceProfile",
"PhysicalResourceId": "monitoring-1-IAMInstanceProfile-gTiXgLxPzjHq",
"ResourceType": "AWS::IAM::InstanceProfile",
"Timestamp": "2024-06-22T23:24:26.474000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "Monitoring1EC2RoleforSSM",
"PhysicalResourceId": "Monitoring1EC2RoleforSSM",
"ResourceType": "AWS::IAM::Role",
"Timestamp": "2024-06-22T23:22:14.238000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "PrivateSubnet1",
"PhysicalResourceId": "subnet-04b281a734ba8c075",
"ResourceType": "AWS::EC2::Subnet",
"Timestamp": "2024-06-22T23:22:12.421000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "PrivateSubnet2",
"PhysicalResourceId": "subnet-06f261f48f7beae0f",
"ResourceType": "AWS::EC2::Subnet",
"Timestamp": "2024-06-22T23:22:12.823000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "PublicRoute",
"PhysicalResourceId": "rtb-005ca0ece222251e1|0.0.0.0/0",
"ResourceType": "AWS::EC2::Route",
"Timestamp": "2024-06-22T23:22:21.821000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "PublicRouteTable",
"PhysicalResourceId": "rtb-005ca0ece222251e1",
"ResourceType": "AWS::EC2::RouteTable",
"Timestamp": "2024-06-22T23:22:19.653000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "PublicSubnet1",
"PhysicalResourceId": "subnet-08cda4950b87852d6",
"ResourceType": "AWS::EC2::Subnet",
"Timestamp": "2024-06-22T23:22:12.842000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "PublicSubnet1Assoc",
"PhysicalResourceId": "rtbassoc-0945997393dccb837",
"ResourceType": "AWS::EC2::SubnetRouteTableAssociation",
"Timestamp": "2024-06-22T23:22:15.092000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "PublicSubnet2",
"PhysicalResourceId": "subnet-065d757166972e0c9",
"ResourceType": "AWS::EC2::Subnet",
"Timestamp": "2024-06-22T23:22:12.850000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "PublicSubnet2Assoc",
"PhysicalResourceId": "rtbassoc-08ca3a7c0f8be03aa",
"ResourceType": "AWS::EC2::SubnetRouteTableAssociation",
"Timestamp": "2024-06-22T23:22:14.832000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "SecurityGroupDB",
"PhysicalResourceId": "sg-0b56c8512f3c29157",
"ResourceType": "AWS::EC2::SecurityGroup",
"Timestamp": "2024-06-22T23:22:11.752000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "SecurityGroupLB",
"PhysicalResourceId": "sg-0c7c991af0197422f",
"ResourceType": "AWS::EC2::SecurityGroup",
"Timestamp": "2024-06-22T23:22:11.626000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
},
{
"StackName": "monitoring-1",
"StackId": "arn:aws:cloudformation:ap-northeast-1:999999999999:stack/monitoring-1/34db9450-30ee-11ef-92cd-0a227c45dc8d",
"LogicalResourceId": "SecurityGroupWebServer",
"PhysicalResourceId": "sg-0f97e53a072e77388",
"ResourceType": "AWS::EC2::SecurityGroup",
"Timestamp": "2024-06-22T23:22:12.372000+00:00",
"ResourceStatus": "CREATE_COMPLETE",
"DriftInformation": {
"StackResourceDriftStatus": "NOT_CHECKED"
}
}
]
}
2. WordPressの初期設定
WebUIからの設定のため省略
3. CloudWatchメトリクスの確認
インスタンスIDの取得
コマンド
# Ec2インスタンス1
OUTPUTKEY='EC2WebServer01'
echo ${OUTPUTKEY}
EC2_INSTANCE_ID_1=$(
aws cloudformation describe-stacks \
--stack-name ${STACK_NAME} \
--query "Stacks[*].Outputs[?OutputKey=='${OUTPUTKEY}'].OutputValue" \
--output text
) \
&& echo ${EC2_INSTANCE_ID_1}
# Ec2インスタンス2
OUTPUTKEY='EC2WebServer02'
echo ${OUTPUTKEY}
EC2_INSTANCE_ID_2=$(
aws cloudformation describe-stacks \
--stack-name ${STACK_NAME} \
--query "Stacks[*].Outputs[?OutputKey=='${OUTPUTKEY}'].OutputValue" \
--output text
) \
&& echo ${EC2_INSTANCE_ID_2}
# EC2 AMI
PARAMETERKEY='EC2AMI'
echo ${PARAMETERKEY}
EC2_AMI=$(
aws cloudformation describe-stacks \
--stack-name ${STACK_NAME} \
--query "Stacks[*].Parameters[?ParameterKey=='${PARAMETERKEY}'].ResolvedValue" \
--output text
) \
&& echo ${EC2_AMI}
# ALB ARN
LOGICALRESOURCEID='FrontLB'
echo ${LOGICALRESOURCEID}
ALB_ARN=$(
aws cloudformation describe-stack-resources \
--stack-name ${STACK_NAME} \
--query "StackResources[?LogicalResourceId=='${LOGICALRESOURCEID}'].PhysicalResourceId" \
--output text
) \
&& echo ${ALB_ARN}
last_part=$(echo "${ALB_ARN}" | awk -F':' '{print $NF}') \
&& DIMENSIONS_ALB=$(echo ${last_part} | rev | cut -d'/' -f1-3 | rev) \
&& echo ${DIMENSIONS_ALB}
# TARGETGROUP ARN
LOGICALRESOURCEID='FrontLBTargetGroup'
echo ${LOGICALRESOURCEID}
TARGET_GROUP_ARN=$(
aws cloudformation describe-stack-resources \
--stack-name ${STACK_NAME} \
--query "StackResources[?LogicalResourceId=='${LOGICALRESOURCEID}'].PhysicalResourceId" \
--output text
) \
&& echo ${TARGET_GROUP_ARN}
last_part=$(echo "${TARGET_GROUP_ARN}" | awk -F':' '{print $NF}') \
&& DIMENSIONS_TG=$(echo ${last_part} | rev | cut -d'/' -f1-3 | rev) \
&& echo ${DIMENSIONS_TG}
# RDS
RDS_INSTANCE_ID=$(
aws cloudformation describe-stack-resources \
--stack-name ${STACK_NAME} \
--query "StackResources[?LogicalResourceId=='DBInstance'].PhysicalResourceId" \
--output text
) \
&& echo ${RDS_INSTANCE_ID}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ # Ec2インスタンス1
[cloudshell-user@ip-10-132-88-36 ~]$ OUTPUTKEY='EC2WebServer01'
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${OUTPUTKEY}
EC2WebServer01
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ EC2_INSTANCE_ID_1=$(
> aws cloudformation describe-stacks \
> --stack-name ${STACK_NAME} \
> --query "Stacks[*].Outputs[?OutputKey=='${OUTPUTKEY}'].OutputValue" \
> --output text
> ) \
> && echo ${EC2_INSTANCE_ID_1}
i-0b8d540d2dc6e0497
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # Ec2インスタンス2
[cloudshell-user@ip-10-132-88-36 ~]$ OUTPUTKEY='EC2WebServer02'
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${OUTPUTKEY}
EC2WebServer02
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ EC2_INSTANCE_ID_2=$(
> aws cloudformation describe-stacks \
> --stack-name ${STACK_NAME} \
> --query "Stacks[*].Outputs[?OutputKey=='${OUTPUTKEY}'].OutputValue" \
> --output text
> ) \
> && echo ${EC2_INSTANCE_ID_2}
i-02cee7d18cb05c8e9
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # EC2 AMI
[cloudshell-user@ip-10-132-88-36 ~]$ PARAMETERKEY='EC2AMI'
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${PARAMETERKEY}
EC2AMI
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ EC2_AMI=$(
> aws cloudformation describe-stacks \
> --stack-name ${STACK_NAME} \
> --query "Stacks[*].Parameters[?ParameterKey=='${PARAMETERKEY}'].ResolvedValue" \
> --output text
> ) \
> && echo ${EC2_AMI}
ami-029dc392355a76964
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # ALB ARN
[cloudshell-user@ip-10-132-88-36 ~]$ LOGICALRESOURCEID='FrontLB'
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${LOGICALRESOURCEID}
FrontLB
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ ALB_ARN=$(
> aws cloudformation describe-stack-resources \
> --stack-name ${STACK_NAME} \
> --query "StackResources[?LogicalResourceId=='${LOGICALRESOURCEID}'].PhysicalResourceId" \
> --output text
> ) \
> && echo ${ALB_ARN}
arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:loadbalancer/app/monitoring-1-elb/c147aef4db266283
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ last_part=$(echo "${ALB_ARN}" | awk -F':' '{print $NF}') \
> && DIMENSIONS_ALB=$(echo ${last_part} | rev | cut -d'/' -f1-3 | rev) \
> && echo ${DIMENSIONS_ALB}
app/monitoring-1-elb/c147aef4db266283
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # TARGETGROUP ARN
[cloudshell-user@ip-10-132-88-36 ~]$ LOGICALRESOURCEID='FrontLBTargetGroup'
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${LOGICALRESOURCEID}
FrontLBTargetGroup
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ TARGET_GROUP_ARN=$(
> aws cloudformation describe-stack-resources \
> --stack-name ${STACK_NAME} \
> --query "StackResources[?LogicalResourceId=='${LOGICALRESOURCEID}'].PhysicalResourceId" \
> --output text
> ) \
> && echo ${TARGET_GROUP_ARN}
arn:aws:elasticloadbalancing:ap-northeast-1:999999999999:targetgroup/monitoring-1-tg/0726cfe1b71c5746
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ last_part=$(echo "${TARGET_GROUP_ARN}" | awk -F':' '{print $NF}') \
> && DIMENSIONS_TG=$(echo ${last_part} | rev | cut -d'/' -f1-3 | rev) \
> && echo ${DIMENSIONS_TG}
targetgroup/monitoring-1-tg/0726cfe1b71c5746
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # RDS
[cloudshell-user@ip-10-132-88-36 ~]$ RDS_INSTANCE_ID=$(
> aws cloudformation describe-stack-resources \
> --stack-name ${STACK_NAME} \
> --query "StackResources[?LogicalResourceId=='DBInstance'].PhysicalResourceId" \
> --output text
> ) \
> && echo ${RDS_INSTANCE_ID}
monitoring-1-rds
取得期間の指定
コマンド
# 現在時間のUnixタイムスタンプ
END_TIME=$(date +%s)
echo ${END_TIME}
# 1時間前のUnixタイムスタンプ
START_TIME=$(date -d '-2 hours' +%s)
echo ${START_TIME}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ # 現在時間のUnixタイムスタンプ
[cloudshell-user@ip-10-132-88-36 ~]$ END_TIME=$(date +%s)
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${END_TIME}
1719100110
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # 1時間前のUnixタイムスタンプ
[cloudshell-user@ip-10-132-88-36 ~]$ START_TIME=$(date -d '-2 hours' +%s)
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${START_TIME}
1719092910
メトリクスの取得
EC2 CPU使用率（CPUUtilization）
コマンド
aws cloudwatch get-metric-statistics \
--metric-name CPUUtilization \
--start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--namespace AWS/EC2 \
--statistics Average \
--dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch get-metric-statistics \
> --metric-name CPUUtilization \
> --start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --period 300 \
> --namespace AWS/EC2 \
> --statistics Average \
> --dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1}
{
"Label": "CPUUtilization",
"Datapoints": [
{
"Timestamp": "2024-06-22T23:23:00+00:00",
"Average": 19.2,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:28:00+00:00",
"Average": 0.8721499905784793,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:33:00+00:00",
"Average": 0.8632299397630666,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:38:00+00:00",
"Average": 2.629706579187167,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:43:00+00:00",
"Average": 1.4480156859787752,
"Unit": "Percent"
}
]
}
EC2 ネットワーク入力（NetworkIn）
コマンド
aws cloudwatch get-metric-statistics \
--metric-name NetworkIn \
--start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--namespace AWS/EC2 \
--statistics Average \
--dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch get-metric-statistics \
> --metric-name NetworkIn \
> --start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --period 300 \
> --namespace AWS/EC2 \
> --statistics Average \
> --dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1}
{
"Label": "NetworkIn",
"Datapoints": [
{
"Timestamp": "2024-06-22T23:28:00+00:00",
"Average": 33506.0,
"Unit": "Bytes"
},
{
"Timestamp": "2024-06-22T23:23:00+00:00",
"Average": 56110839.4,
"Unit": "Bytes"
},
{
"Timestamp": "2024-06-22T23:38:00+00:00",
"Average": 302097.2,
"Unit": "Bytes"
},
{
"Timestamp": "2024-06-22T23:33:00+00:00",
"Average": 37111.6,
"Unit": "Bytes"
},
{
"Timestamp": "2024-06-22T23:43:00+00:00",
"Average": 116185.0,
"Unit": "Bytes"
}
]
}
EC2 ネットワーク出力（NetworkOut）
コマンド
aws cloudwatch get-metric-statistics \
--metric-name NetworkOut \
--start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--namespace AWS/EC2 \
--statistics Average \
--dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch get-metric-statistics \
> --metric-name NetworkOut \
> --start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --period 300 \
> --namespace AWS/EC2 \
> --statistics Average \
> --dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1}
{
"Label": "NetworkOut",
"Datapoints": [
{
"Timestamp": "2024-06-22T23:28:00+00:00",
"Average": 22059.0,
"Unit": "Bytes"
},
{
"Timestamp": "2024-06-22T23:23:00+00:00",
"Average": 252882.0,
"Unit": "Bytes"
},
{
"Timestamp": "2024-06-22T23:38:00+00:00",
"Average": 873908.8,
"Unit": "Bytes"
},
{
"Timestamp": "2024-06-22T23:33:00+00:00",
"Average": 22911.4,
"Unit": "Bytes"
},
{
"Timestamp": "2024-06-22T23:43:00+00:00",
"Average": 261257.6,
"Unit": "Bytes"
}
]
}
AppELB 別、TG 別メトリクス (HealthyHostCount)
コマンド
aws cloudwatch get-metric-statistics \
--namespace AWS/ApplicationELB \
--metric-name HealthyHostCount \
--dimensions Name=TargetGroup,Value=${DIMENSIONS_TG} Name=LoadBalancer,Value=${DIMENSIONS_ALB} \
--start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--statistics Average
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch get-metric-statistics \
> --namespace AWS/ApplicationELB \
> --metric-name HealthyHostCount \
> --dimensions Name=TargetGroup,Value=${DIMENSIONS_TG} Name=LoadBalancer,Value=${DIMENSIONS_ALB} \
> --start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --period 300 \
> --statistics Average
{
"Label": "HealthyHostCount",
"Datapoints": [
{
"Timestamp": "2024-06-22T23:33:00+00:00",
"Average": 2.0,
"Unit": "Count"
},
{
"Timestamp": "2024-06-22T23:28:00+00:00",
"Average": 2.0,
"Unit": "Count"
},
{
"Timestamp": "2024-06-22T23:23:00+00:00",
"Average": 2.0,
"Unit": "Count"
},
{
"Timestamp": "2024-06-22T23:43:00+00:00",
"Average": 2.0,
"Unit": "Count"
},
{
"Timestamp": "2024-06-22T23:38:00+00:00",
"Average": 2.0,
"Unit": "Count"
}
]
}
RDS（WriteIOPS）
コマンド
aws cloudwatch get-metric-statistics \
--metric-name WriteIOPS \
--start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--namespace AWS/RDS \
--statistics Average \
--dimensions Name=DBInstanceIdentifier,Value=${RDS_INSTANCE_ID}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch get-metric-statistics \
> --metric-name WriteIOPS \
> --start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --period 300 \
> --namespace AWS/RDS \
> --statistics Average \
> --dimensions Name=DBInstanceIdentifier,Value=${RDS_INSTANCE_ID}
{
"Label": "WriteIOPS",
"Datapoints": [
{
"Timestamp": "2024-06-22T23:33:00+00:00",
"Average": 0.3333804284775603,
"Unit": "Count/Second"
},
{
"Timestamp": "2024-06-22T23:28:00+00:00",
"Average": 0.8397166918240048,
"Unit": "Count/Second"
},
{
"Timestamp": "2024-06-22T23:43:00+00:00",
"Average": 7.784855338298053,
"Unit": "Count/Second"
},
{
"Timestamp": "2024-06-22T23:38:00+00:00",
"Average": 0.126673406820922,
"Unit": "Count/Second"
},
{
"Timestamp": "2024-06-22T23:23:00+00:00",
"Average": 129.89268581547697,
"Unit": "Count/Second"
}
]
}
RDS（ReadIOPS）
コマンド
aws cloudwatch get-metric-statistics \
--metric-name ReadIOPS \
--start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--namespace AWS/RDS \
--statistics Average \
--dimensions Name=DBInstanceIdentifier,Value=${RDS_INSTANCE_ID}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch get-metric-statistics \
> --metric-name ReadIOPS \
> --start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --period 300 \
> --namespace AWS/RDS \
> --statistics Average \
> --dimensions Name=DBInstanceIdentifier,Value=${RDS_INSTANCE_ID}
{
"Label": "ReadIOPS",
"Datapoints": [
{
"Timestamp": "2024-06-22T23:33:00+00:00",
"Average": 0.3301217130739428,
"Unit": "Count/Second"
},
{
"Timestamp": "2024-06-22T23:28:00+00:00",
"Average": 0.2632421608157417,
"Unit": "Count/Second"
},
{
"Timestamp": "2024-06-22T23:43:00+00:00",
"Average": 0.2799391798832384,
"Unit": "Count/Second"
},
{
"Timestamp": "2024-06-22T23:38:00+00:00",
"Average": 0.2667908389089163,
"Unit": "Count/Second"
},
{
"Timestamp": "2024-06-22T23:23:00+00:00",
"Average": 11.988669499291843,
"Unit": "Count/Second"
}
]
}
EC2 カスタムメトリクス（disk_used_percent）
コマンド
aws cloudwatch get-metric-statistics \
--namespace CWAgent \
--metric-name disk_used_percent \
--dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1} Name=path,Value="/" Name=ImageId,Value=${EC2_AMI} Name=InstanceType,Value="t2.micro" Name=device,Value="xvda1" Name=fstype,Value="xfs" \
--start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--statistics Average
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch get-metric-statistics \
> --namespace CWAgent \
> --metric-name disk_used_percent \
> --dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1} Name=path,Value="/" Name=ImageId,Value=${EC2_AMI} Name=InstanceType,Value="t2.micro" Name=device,Value="xvda1" Name=fstype,Value="xfs" \
> --start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --period 300 \
> --statistics Average
{
"Label": "disk_used_percent",
"Datapoints": [
{
"Timestamp": "2024-06-22T23:23:00+00:00",
"Average": 29.81738953953416,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:28:00+00:00",
"Average": 29.81684992180318,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:33:00+00:00",
"Average": 29.814806059954872,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:38:00+00:00",
"Average": 29.81401334718193,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:43:00+00:00",
"Average": 29.8171173429796,
"Unit": "Percent"
}
]
}
EC2 カスタムメトリクス（disk_used_percent）
コマンド
aws cloudwatch get-metric-statistics \
--namespace CWAgent \
--metric-name mem_used_percent \
--dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1} Name=ImageId,Value=${EC2_AMI} Name=InstanceType,Value="t2.micro" \
--start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
--period 300 \
--statistics Average
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch get-metric-statistics \
> --namespace CWAgent \
> --metric-name mem_used_percent \
> --dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1} Name=ImageId,Value=${EC2_AMI} Name=InstanceType,Value="t2.micro" \
> --start-time $(date -d @$START_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --end-time $(date -d @$END_TIME -u +%Y-%m-%dT%H:%M:%SZ) \
> --period 300 \
> --statistics Average
{
"Label": "mem_used_percent",
"Datapoints": [
{
"Timestamp": "2024-06-22T23:23:00+00:00",
"Average": 13.611785500034223,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:28:00+00:00",
"Average": 12.778200529043012,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:33:00+00:00",
"Average": 12.724249415194084,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:38:00+00:00",
"Average": 12.720303736718565,
"Unit": "Percent"
},
{
"Timestamp": "2024-06-22T23:43:00+00:00",
"Average": 25.773735470441636,
"Unit": "Percent"
}
]
}
4. CloudWatch Alarms
変数設定
コマンド
# アラーム名
ALARM_NAME="monitoring-1-alarm" \
&& echo ${ALARM_NAME}
# トピック名
TOPIC_NAME="monitoring-1-topic" \
&& echo ${TOPIC_NAME}
# メールアドレス
EMAIL="username@example.com" \
&& echo ${EMAIL}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ # アラーム名
[cloudshell-user@ip-10-132-88-36 ~]$ ALARM_NAME="monitoring-1-alarm" \
> && echo ${ALARM_NAME}
monitoring-1-alarm
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # トピック名
[cloudshell-user@ip-10-132-88-36 ~]$ TOPIC_NAME="monitoring-1-topic" \
> && echo ${TOPIC_NAME}
monitoring-1-topic
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ # メールアドレス
[cloudshell-user@ip-10-132-88-36 ~]$ EMAIL="username@example.com" \
> && echo ${EMAIL}
username@example.com
トピック作成
コマンド
aws sns create-topic --name ${TOPIC_NAME}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws sns create-topic --name ${TOPIC_NAME}
{
"TopicArn": "arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic"
}
ARN取得
コマンド
# トピックのARNを取得
TOPIC_ARN=$(
aws sns list-topics \
--query "Topics[?contains(TopicArn, '${TOPIC_NAME}')].TopicArn" \
--output text
) \
&& echo ${TOPIC_ARN}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ TOPIC_ARN=$(
> aws sns list-topics \
> --query "Topics[?contains(TopicArn, '${TOPIC_NAME}')].TopicArn" \
> --output text
> ) \
> && echo ${TOPIC_ARN}
arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic
サブスクリプションの作成
コマンド
aws sns subscribe \
--topic-arn $TOPIC_ARN \
--protocol email \
--notification-endpoint ${EMAIL}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws sns subscribe \
> --topic-arn $TOPIC_ARN \
> --protocol email \
> --notification-endpoint ${EMAIL}
{
"SubscriptionArn": "pending confirmation"
}
CloudWatchアラームの作成
コマンド
aws cloudwatch put-metric-alarm --alarm-name ${ALARM_NAME} \
--metric-name "disk_used_percent" \
--namespace "CWAgent" \
--statistic "Average" \
--period 900 \
--threshold 90 \
--comparison-operator "GreaterThanOrEqualToThreshold" \
--dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1} Name=path,Value="/" Name=ImageId,Value=${EC2_AMI} Name=InstanceType,Value="t2.micro" Name=device,Value="xvda1" Name=fstype,Value="xfs" \
--evaluation-periods 1 \
--alarm-actions ${TOPIC_ARN}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch put-metric-alarm --alarm-name ${ALARM_NAME} \
> --metric-name "disk_used_percent" \
> --namespace "CWAgent" \
> --statistic "Average" \
> --period 900 \
> --threshold 90 \
> --comparison-operator "GreaterThanOrEqualToThreshold" \
> --dimensions Name=InstanceId,Value=${EC2_INSTANCE_ID_1} Name=path,Value="/" Name=ImageId,Value=${EC2_AMI} Name=InstanceType,Value="t2.micro" Name=device,Value="xvda1" Name=fstype,Value="xfs" \
> --evaluation-periods 1 \
> --alarm-actions ${TOPIC_ARN}
CloudWatchログの確認
変数設定
コマンド
LOG_GROUP_NAME='wordpress_access_log' \
&& echo ${LOG_GROUP_NAME}
LOG_ACCESS_NAME='wordpress_access_log' \
&& echo ${LOG_ACCESS_NAME}
LOG_ERROR_NAME='wordpress_error_log' \
&& echo ${LOG_ERROR_NAME}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ LOG_GROUP_NAME='wordpress_access_log' \
> && echo ${LOG_GROUP_NAME}
wordpress_access_log
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ LOG_ACCESS_NAME='wordpress_access_log' \
> && echo ${LOG_ACCESS_NAME}
wordpress_access_log
[cloudshell-user@ip-10-132-88-36 ~]$
[cloudshell-user@ip-10-132-88-36 ~]$ LOG_ERROR_NAME='wordpress_error_log' \
> && echo ${LOG_ERROR_NAME}
wordpress_error_log
最新のログストリーム名を取得
コマンド
LATEST_LOG_STREAM_NAME=$(
aws logs describe-log-streams \
--log-group-name "$LOG_GROUP_NAME" \
--order-by LastEventTime \
--descending \
--limit 1 | jq -r '.logStreams[0].logStreamName'
) \
&& echo ${LATEST_LOG_STREAM_NAME}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ LATEST_LOG_STREAM_NAME=$(
> aws logs describe-log-streams \
> --log-group-name "$LOG_GROUP_NAME" \
> --order-by LastEventTime \
> --descending \
> --limit 1 | jq -r '.logStreams[0].logStreamName'
> ) \
> && echo ${LATEST_LOG_STREAM_NAME}
i-02cee7d18cb05c8e9
ログの確認
コマンド
aws logs get-log-events \
--log-group-name ${LOG_GROUP_NAME} \
--log-stream-name ${LATEST_LOG_STREAM_NAME} \
--output table
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws logs get-log-events \
> --log-group-name ${LOG_GROUP_NAME} \
> --log-stream-name ${LATEST_LOG_STREAM_NAME} \
> --output table
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| GetLogEvents |
+----------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| nextBackwardToken | b/38337570254780535266769393403704440839829444184946114560/s |
| nextForwardToken | f/38337682176645500392334291047353364048084678697053388801/s |
+----------------------------------------------------------------------------------------------------------------------------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|| events ||
|+---------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+|
|| ingestionTime | message | timestamp ||
|+---------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+|
|| 1719117011969| 10.0.0.222 - - [23/Jun/2024:04:30:06 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" | 1719117006937 ||
|| 1719117011969| 10.0.1.176 - - [23/Jun/2024:04:30:06 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" | 1719117011117 ||
|| 1719117042021| 10.0.0.222 - - [23/Jun/2024:04:30:36 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" | 1719117036999 ||
|| 1719117042021| 10.0.1.176 - - [23/Jun/2024:04:30:36 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" | 1719117041117 ||
|| 1719117072099| 10.0.0.222 - - [23/Jun/2024:04:31:06 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" | 1719117067071 ||
|| 1719117072099| 10.0.1.176 - - [23/Jun/2024:04:31:06 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" | 1719117071117 ||
|+---------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+|
フィルター
コマンド
aws logs filter-log-events \
--log-group-name ${LOG_GROUP_NAME} \
--filter-pattern "GET" \
--output table
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws logs filter-log-events \
> --log-group-name ${LOG_GROUP_NAME} \
> --filter-pattern "GET" \
> --output table
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| FilterLogEvents |
+---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
|| events ||
|+----------------------------------------------------------+----------------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+|
|| eventId | ingestionTime | logStreamName | message | timestamp ||
|+----------------------------------------------------------+----------------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+|
|| 38336162989001542094297206108908958612843111801005670400| 1719053007714 | i-07ebafd72024ae1a4 | 15.177.2.30 - - [22/Jun/2024:10:42:44 +0000] "GET / HTTP/1.1" 302 - "-" "Amazon-Route53-Health-Check-Service (ref d5fdcdf0-bc0e-4b97-8653-9d8cb3286735; report http://amzn.to/1vsZADi)" | 1719053002387 ||
|| 38336162989001542094297206108908958612843111801005670401| 1719053007714 | i-07ebafd72024ae1a4 | 15.177.14.137 - - [22/Jun/2024:10:42:48 +0000] "GET / HTTP/1.1" 302 - "-" "Amazon-Route53-Health-Check-Service (ref d5fdcdf0-bc0e-4b97-8653-9d8cb3286735; report http://amzn.to/1vsZADi)" | 1719053002387 ||
|| 38336162989001542094297206108908958612843111801005670402| 1719053007714 | i-07ebafd72024ae1a4 | 15.177.18.108 - - [22/Jun/2024:10:42:48 +0000] "GET / HTTP/1.1" 302 - "-" "Amazon-Route53-Health-Check-Service (ref d5fdcdf0-bc0e-4b97-8653-9d8cb3286735; report http://amzn.to/1vsZADi)" | 1719053002387 ||
|| 38336162989001542094297206108908958612843111801005670403| 1719053007714 | i-07ebafd72024ae1a4 | 15.177.30.159 - - [22/Jun/2024:10:42:49 +0000] "GET / HTTP/1.1" 302 - "-" "Amazon-Route53-Health-Check-Service (ref d5fdcdf0-bc0e-4b97-8653-9d8cb3286735; report http://amzn.to/1vsZADi)" | 1719053002387 ||
|+----------------------------------------------------------+----------------+----------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------------+|
5. CloudWatch Logs Insights
クエリ実行
コマンド
# クエリIDを変数に保存
QUERY_ID=$(aws logs start-query \
--log-group-name $LOG_GROUP_NAME \
--start-time $(date -d @$START_TIME -u +%s) \
--end-time $(date -d @$END_TIME -u +%s) \
--query-string "fields @timestamp, @message | sort @timestamp desc | limit 20" \
--query "queryId" \
--output text
) \
&& echo ${QUERY_ID}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ # クエリIDを変数に保存
[cloudshell-user@ip-10-132-88-36 ~]$ QUERY_ID=$(aws logs start-query \
> --log-group-name $LOG_GROUP_NAME \
> --start-time $(date -d @$START_TIME -u +%s) \
> --end-time $(date -d @$END_TIME -u +%s) \
> --query-string "fields @timestamp, @message | sort @timestamp desc | limit 20" \
> --query "queryId" \
> --output text
> ) \
> && echo ${QUERY_ID}
17e92a1b-5d49-4417-a571-96c7f67ab71a
クエリ結果の確認
コマンド
# クエリ結果を取得
aws logs get-query-results \
--query-id ${QUERY_ID} \
--output table
出力
[cloudshell-user@ip-10-132-88-36 ~]$ # クエリ結果を取得
[cloudshell-user@ip-10-132-88-36 ~]$ aws logs get-query-results \
> --query-id ${QUERY_ID} \
> --output table
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
| GetQueryResults |
+---------------------------------------------------------------------------------+--------------------------------------------------------------------------------------------------+
| status | Complete |
+---------------------------------------------------------------------------------+--------------------------------------------------------------------------------------------------+
|| results ||
|+------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------+|
|| field | value ||
|+------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------+|
|| @timestamp| 2024-06-22 23:48:29.117 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:48:24 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAQiDgiwr7CPhDIQl/HnkoQyEjUaGAIGYhoZ3wAAAAFLOVB2AAZndiggAAAE8iABKJ++55KEMjC94ueShDI4AkCSAkiaB1DJAxgAIAEQARgB ||
|| @timestamp| 2024-06-22 23:48:29.056 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:48:24 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAciDgiwr7CPhDIQl/HnkoQyEjUaGAIGTNfXYwAAAAU1BW6hAAZndiuAAAAFMiABKIy/55KEMjDtzOmShDI4BkC2BkjTCFCABRgAIAEQARgB ||
|| @timestamp| 2024-06-22 23:48:24.588 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:48:23 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAciDgiwr7CPhDIQl/HnkoQyEjUaGAIGTNfXYwAAAAU1BW6hAAZndiuAAAAFMiABKIy/55KEMjDtzOmShDI4BkC2BkjTCFCABRgAIAEQABgB ||
|| @timestamp| 2024-06-22 23:48:24.479 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:48:23 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAQiDgiwr7CPhDIQl/HnkoQyEjUaGAIGYhoZ3wAAAAFLOVB2AAZndiggAAAE8iABKJ++55KEMjC94ueShDI4AkCSAkiaB1DJAxgAIAEQABgB ||
|| @timestamp| 2024-06-22 23:47:59.116 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:47:54 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAciDgiwr7CPhDIQl/HnkoQyEjUaGAIGTNfXYwAAAAU1BJwMAAZndiMgAAAFMiABKKCf3pKEMjCM+OWShDI4EECiH0iqDlDXChgAIAEQDxgB ||
|| @timestamp| 2024-06-22 23:47:59.057 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:47:54 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAMiDgiwr7CPhDIQl/HnkoQyEjUaGAIGVMKtUQAAAANuJbAMAAZndiewAAACEiABKI3U5ZKEMjDR9+WShDI4AkCSAkidB1DMAxgAIAEQARgB ||
|| @timestamp| 2024-06-22 23:47:54.509 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:47:53 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAMiDgiwr7CPhDIQl/HnkoQyEjUaGAIGVMKtUQAAAANuJbAMAAZndiewAAACEiABKI3U5ZKEMjDR9+WShDI4AkCSAkidB1DMAxgAIAEQABgB ||
|| @timestamp| 2024-06-22 23:47:54.412 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:47:53 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAciDgiwr7CPhDIQl/HnkoQyEjUaGAIGTNfXYwAAAAU1BJwMAAZndiMgAAAFMiABKKCf3pKEMjCM+OWShDI4EECiH0iqDlDXChgAIAEQDhgB ||
|| @timestamp| 2024-06-22 23:47:29.117 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:47:24 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAYiDgiwr7CPhDIQl/HnkoQyEjUaGAIGZvZEWwAAAAOKtKPgAAZndiCwAAADsiABKJGV4JKEMjDdjeSShDI4BECkBEiaCFDHBBgAIAEQAxgB ||
|| @timestamp| 2024-06-22 23:47:29.056 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:47:24 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAEiDgiwr7CPhDIQl/HnkoQyEjUaGAIGUyFXogAAAAR3l+31AAZndiNwAAAGIiABKISA4pKEMjCgjeSShDI4BECkBEjeB1CMBBgAIAEQAxgB ||
|| @timestamp| 2024-06-22 23:47:24.422 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:47:23 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAEiDgiwr7CPhDIQl/HnkoQyEjUaGAIGUyFXogAAAAR3l+31AAZndiNwAAAGIiABKISA4pKEMjCgjeSShDI4BECkBEjeB1CMBBgAIAEQAhgB ||
|| @timestamp| 2024-06-22 23:47:24.335 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:47:23 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAYiDgiwr7CPhDIQl/HnkoQyEjUaGAIGZvZEWwAAAAOKtKPgAAZndiCwAAADsiABKJGV4JKEMjDdjeSShDI4BECkBEiaCFDHBBgAIAEQAhgB ||
|| @timestamp| 2024-06-22 23:46:59.117 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:46:54 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAciDgiwr7CPhDIQl/HnkoQyEjUaGAIGTNfXYwAAAAU1BJwMAAZndiMgAAAFMiABKKCf3pKEMjCM+OWShDI4EECiH0iqDlDXChgAIAEQDRgB ||
|| @timestamp| 2024-06-22 23:46:59.057 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:46:54 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAEiDgiwr7CPhDIQl/HnkoQyEjUaGAIGUyFXogAAAAR3l+31AAZndiNwAAAGIiABKISA4pKEMjCgjeSShDI4BECkBEjeB1CMBBgAIAEQARgB ||
|| @timestamp| 2024-06-22 23:46:54.596 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:46:53 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAEiDgiwr7CPhDIQl/HnkoQyEjUaGAIGUyFXogAAAAR3l+31AAZndiNwAAAGIiABKISA4pKEMjCgjeSShDI4BECkBEjeB1CMBBgAIAEQABgB ||
|| @timestamp| 2024-06-22 23:46:54.509 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:46:53 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAciDgiwr7CPhDIQl/HnkoQyEjUaGAIGTNfXYwAAAAU1BJwMAAZndiMgAAAFMiABKKCf3pKEMjCM+OWShDI4EECiH0iqDlDXChgAIAEQDBgB ||
|| @timestamp| 2024-06-22 23:46:29.117 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:46:24 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAQiDgiwr7CPhDIQl/HnkoQyEjUaGAIGYhoZ3wAAAAFLN1c5AAZndh+wAAAE8iABKPje25KEMjD9uOCShDI4C0CfEUi6DFDnCBgAIAEQChgB ||
|| @timestamp| 2024-06-22 23:46:29.056 ||
|| @message | 10.0.1.176 - - [22/Jun/2024:23:46:24 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAYiDgiwr7CPhDIQl/HnkoQyEjUaGAIGZvZEWwAAAAOKtKPgAAZndiCwAAADsiABKJGV4JKEMjDdjeSShDI4BECkBEiaCFDHBBgAIAEQARgB ||
|| @timestamp| 2024-06-22 23:46:24.529 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:46:23 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAYiDgiwr7CPhDIQl/HnkoQyEjUaGAIGZvZEWwAAAAOKtKPgAAZndiCwAAADsiABKJGV4JKEMjDdjeSShDI4BECkBEiaCFDHBBgAIAEQABgB ||
|| @timestamp| 2024-06-22 23:46:24.430 ||
|| @message | 10.0.0.222 - - [22/Jun/2024:23:46:23 +0000] "GET /.check_alive HTTP/1.1" 200 - "-" "ELB-HealthChecker/2.0" ||
|| @ptr | CnIKNQohNDIzNzYxMTc1MTk3OndvcmRwcmVzc19hY2Nlc3NfbG9nEAQiDgiwr7CPhDIQl/HnkoQyEjUaGAIGYhoZ3wAAAAFLN1c5AAZndh+wAAAE8iABKPje25KEMjD9uOCShDI4C0CfEUi6DFDnCBgAIAEQCRgB ||
|+------------+---------------------------------------------------------------------------------------------------------------------------------------------------------------------+|
|| statistics ||
|+--------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------------+|
|| bytesScanned | 72658.0 ||
|| recordsMatched | 325.0 ||
|| recordsScanned | 329.0 ||
|+--------------------------------------------------------------------------------------------------------------+-------------------------------------------------------------------+|
ハンズオン内で指定しているクエリは管理コンソールからだとうまくいくが、CLIからだとうまくいかなかった
6. CloudWatch Dashboards
変数設定
コマンド
# ダッシュボード名
DASHBOARD="WordPress_dashboard"
echo ${DASHBOARD}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ # ダッシュボード名
[cloudshell-user@ip-10-132-88-36 ~]$ DASHBOARD="WordPress_dashboard"
[cloudshell-user@ip-10-132-88-36 ~]$ echo ${DASHBOARD}
WordPress_dashboard
ダッシュボード用JSONファイル作成
コマンド
cat << EOF > dashboard.json
{
"widgets": [
{
"height": 6,
"width": 6,
"y": 0,
"x": 0,
"type": "metric",
"properties": {
"view": "timeSeries",
"stacked": false,
"metrics": [
[ "AWS/EC2", "CPUUtilization", "InstanceId", "${EC2_INSTANCE_ID_1}" ],
[ "...", "${EC2_INSTANCE_ID_2}" ]
],
"region": "ap-northeast-1"
}
},
{
"height": 6,
"width": 6,
"y": 0,
"x": 6,
"type": "text",
"properties": {
"markdown": "# WordPress障害時メモ\n非常時は以下のボタンをクリックしてください \n\n [button:primary:非常時ボタン](https://amazon.com) \n "
}
},
{
"height": 6,
"width": 24,
"y": 6,
"x": 0,
"type": "log",
"properties": {
"query": "SOURCE 'wordpress_access_log' | fields @timestamp, @message, @logStream, @log\n| sort @timestamp desc\n| limit 1000",
"region": "ap-northeast-1",
"stacked": false,
"view": "table"
}
}
]
}
EOF
出力
[cloudshell-user@ip-10-132-88-36 ~]$ cat << EOF > dashboard.json
> {
> "widgets": [
> {
> "height": 6,
> "width": 6,
> "y": 0,
> "x": 0,
> "type": "metric",
> "properties": {
> "view": "timeSeries",
> "stacked": false,
> "metrics": [
> [ "AWS/EC2", "CPUUtilization", "InstanceId", "${EC2_INSTANCE_ID_1}" ],
> [ "...", "${EC2_INSTANCE_ID_2}" ]
> ],
> "region": "ap-northeast-1"
> }
> },
> {
> "height": 6,
> "width": 6,
> "y": 0,
> "x": 6,
> "type": "text",
> "properties": {
> "markdown": "# WordPress障害時メモ\n非常時は以下のボタンをクリックしてください \n\n [button:primary:非常時ボタン](https://amazon.com) \n "
> }
> },
> {
> "height": 6,
> "width": 24,
> "y": 6,
> "x": 0,
> "type": "log",
> "properties": {
> "query": "SOURCE 'wordpress_access_log' | fields @timestamp, @message, @logStream, @log\n| sort @timestamp desc\n| limit 1000",
> "region": "ap-northeast-1",
> "stacked": false,
> "view": "table"
> }
> }
> ]
> }
> EOF
ダッシュボード作成
コマンド
aws cloudwatch put-dashboard \
--dashboard-name ${DASHBOARD} \
--dashboard-body file://dashboard.json
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws cloudwatch put-dashboard \
> --dashboard-name ${DASHBOARD} \
> --dashboard-body file://dashboard.json
{
"DashboardValidationMessages": []
}
7. CloudWatch Events (Amazon EventBridge)
変数設定
コマンド
# ルール名
EVENT_RULE_NAME="monitoring-1-event-rule" \
&& echo ${EVENT_RULE_NAME}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ # ルール名
[cloudshell-user@ip-10-132-88-36 ~]$ EVENT_RULE_NAME="monitoring-1-event-rule" \
> && echo ${EVENT_RULE_NAME}
monitoring-1-event-rule
EventBridgeルールの作成
ルールの作成
コマンド
aws events put-rule \
--name ${EVENT_RULE_NAME} \
--event-pattern \
'{ "source": ["aws.ec2"],
"detail-type": ["EC2 Instance State-change Notification"],
"detail": {
"state": ["stopped"]
}
}'
出力
[cloudshell-user@ip-10-132-88-36 ~]$ aws events put-rule \
> --name ${EVENT_RULE_NAME} \
> --event-pattern \
> '{ "source": ["aws.ec2"],
> "detail-type": ["EC2 Instance State-change Notification"],
> "detail": {
> "state": ["stopped"]
> }
> }'
{
"RuleArn": "arn:aws:events:ap-northeast-1:999999999999:rule/monitoring-1-event-rule"
}
ARNの取得
コマンド
EVENT_RULE_ARN=$(
aws events describe-rule \
--name ${EVENT_RULE_NAME} \
--query "Arn" \
--output text
) \
&& echo ${EVENT_RULE_ARN}
出力
[cloudshell-user@ip-10-132-88-36 ~]$ EVENT_RULE_ARN=$(
> aws events describe-rule \
> --name ${EVENT_RULE_NAME} \
> --query "Arn" \
> --output text
> ) \
> && echo ${EVENT_RULE_ARN}
arn:aws:events:ap-northeast-1:999999999999:rule/monitoring-1-event-rule
EventBridgeターゲットの作成
JSONファイルの作成
コマンド
cat << EOF > ${HOME}/${EVENT_RULE_NAME}.json
[
{
"Id": "1",
"Arn": "${TOPIC_ARN}"
}
]
EOF
出力
[cloudshell-user@ip-10-134-29-105 ~]$ cat << EOF > ${HOME}/${EVENT_RULE_NAME}.json
> [
> {
> "Id": "1",
> "Arn": "${TOPIC_ARN}"
> }
> ]
> EOF
ターゲットの作成
コマンド
aws events put-targets \
--rule ${EVENT_RULE_NAME} \
--targets file://${HOME}/${EVENT_RULE_NAME}.json
出力
[cloudshell-user@ip-10-134-29-105 ~]$ aws events put-targets \
> --rule ${EVENT_RULE_NAME} \
> --targets file://${HOME}/${EVENT_RULE_NAME}.json
{
"FailedEntryCount": 0,
"FailedEntries": []
}
SNSトピックにEventBridgeルールからの許可権限追加
コマンド
# 現在のSNSトピックのポリシーを取得
CURRENT_POLICY=$(
aws sns get-topic-attributes \
--topic-arn ${TOPIC_ARN} \
--query "Attributes.Policy" \
--output text
) \
&& echo ${CURRENT_POLICY}
# 現在のポリシーをJSON形式に変換
CURRENT_POLICY_JSON=$(echo ${CURRENT_POLICY} | jq .) \
&& echo ${CURRENT_POLICY_JSON}
# 新しいポリシーステートメント
NEW_POLICY_STATEMENT=$(cat <<EOF
{
"Sid": "${EVENT_RULE_NAME}",
"Effect": "Allow",
"Principal": {
"Service": "events.amazonaws.com"
},
"Action": "sns:Publish",
"Resource": "${TOPIC_ARN}"
}
EOF
) \
&& echo ${NEW_POLICY_STATEMENT}
# ポリシーに新しいステートメントを追加
UPDATED_POLICY=$(echo ${CURRENT_POLICY_JSON} | jq --argjson stmt "${NEW_POLICY_STATEMENT}" '.Statement += [$stmt]') \
&& echo ${UPDATED_POLICY}
# 更新されたポリシーを文字列に変換
UPDATED_POLICY_STR=$(echo ${UPDATED_POLICY} | jq -c .) \
&& echo ${UPDATED_POLICY_STR}
aws sns set-topic-attributes \
--topic-arn ${TOPIC_ARN} \
--attribute-name Policy \
--attribute-value "${UPDATED_POLICY_STR}"
出力
[cloudshell-user@ip-10-130-49-7 ~]$ # 現在のSNSトピックのポリシーを取得
[cloudshell-user@ip-10-130-49-7 ~]$ CURRENT_POLICY=$(
> aws sns get-topic-attributes \
> --topic-arn ${TOPIC_ARN} \
> --query "Attributes.Policy" \
> --output text
> ) \
> && echo ${CURRENT_POLICY}
{"Version":"2008-10-17","Id":"__default_policy_ID","Statement":[{"Sid":"__default_statement_ID","Effect":"Allow","Principal":{"AWS":"*"},"Action":["SNS:GetTopicAttributes","SNS:SetTopicAttributes","SNS:AddPermission","SNS:RemovePermission","SNS:DeleteTopic","SNS:Subscribe","SNS:ListSubscriptionsByTopic","SNS:Publish"],"Resource":"arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic","Condition":{"StringEquals":{"AWS:SourceOwner":"999999999999"}}}]}
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # 現在のポリシーをJSON形式に変換
[cloudshell-user@ip-10-130-49-7 ~]$ CURRENT_POLICY_JSON=$(echo ${CURRENT_POLICY} | jq .) \
> && echo ${CURRENT_POLICY_JSON}
{ "Version": "2008-10-17", "Id": "__default_policy_ID", "Statement": [ { "Sid": "__default_statement_ID", "Effect": "Allow", "Principal": { "AWS": "*" }, "Action": [ "SNS:GetTopicAttributes", "SNS:SetTopicAttributes", "SNS:AddPermission", "SNS:RemovePermission", "SNS:DeleteTopic", "SNS:Subscribe", "SNS:ListSubscriptionsByTopic", "SNS:Publish" ], "Resource": "arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic", "Condition": { "StringEquals": { "AWS:SourceOwner": "999999999999" } } } ] }
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # 新しいポリシーステートメント
[cloudshell-user@ip-10-130-49-7 ~]$ NEW_POLICY_STATEMENT=$(cat <<EOF
> {
> "Sid": "${EVENT_RULE_NAME}",
> "Effect": "Allow",
> "Principal": {
> "Service": "events.amazonaws.com"
> },
> "Action": "sns:Publish",
> "Resource": "${TOPIC_ARN}"
> }
> EOF
> ) \
> && echo ${NEW_POLICY_STATEMENT}
{ "Sid": "monitoring-1-event-rule", "Effect": "Allow", "Principal": { "Service": "events.amazonaws.com" }, "Action": "sns:Publish", "Resource": "arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic" }
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # ポリシーに新しいステートメントを追加
[cloudshell-user@ip-10-130-49-7 ~]$ UPDATED_POLICY=$(echo ${CURRENT_POLICY_JSON} | jq --argjson stmt "${NEW_POLICY_STATEMENT}" '.Statement += [$stmt]') \
> && echo ${UPDATED_POLICY}
{ "Version": "2008-10-17", "Id": "__default_policy_ID", "Statement": [ { "Sid": "__default_statement_ID", "Effect": "Allow", "Principal": { "AWS": "*" }, "Action": [ "SNS:GetTopicAttributes", "SNS:SetTopicAttributes", "SNS:AddPermission", "SNS:RemovePermission", "SNS:DeleteTopic", "SNS:Subscribe", "SNS:ListSubscriptionsByTopic", "SNS:Publish" ], "Resource": "arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic", "Condition": { "StringEquals": { "AWS:SourceOwner": "999999999999" } } }, { "Sid": "monitoring-1-event-rule", "Effect": "Allow", "Principal": { "Service": "events.amazonaws.com" }, "Action": "sns:Publish", "Resource": "arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic" } ] }
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # 更新されたポリシーを文字列に変換
[cloudshell-user@ip-10-130-49-7 ~]$ UPDATED_POLICY_STR=$(echo ${UPDATED_POLICY} | jq -c .) \
> && echo ${UPDATED_POLICY_STR}
{"Version":"2008-10-17","Id":"__default_policy_ID","Statement":[{"Sid":"__default_statement_ID","Effect":"Allow","Principal":{"AWS":"*"},"Action":["SNS:GetTopicAttributes","SNS:SetTopicAttributes","SNS:AddPermission","SNS:RemovePermission","SNS:DeleteTopic","SNS:Subscribe","SNS:ListSubscriptionsByTopic","SNS:Publish"],"Resource":"arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic","Condition":{"StringEquals":{"AWS:SourceOwner":"999999999999"}}},{"Sid":"monitoring-1-event-rule","Effect":"Allow","Principal":{"Service":"events.amazonaws.com"},"Action":"sns:Publish","Resource":"arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic"}]}
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ aws sns set-topic-attributes \
> --topic-arn ${TOPIC_ARN} \
> --attribute-name Policy \
> --attribute-value "${UPDATED_POLICY_STR}"
8. 削除
CloudFormation
コマンド
aws cloudformation delete-stack --stack-name ${STACK_NAME}
出力
[cloudshell-user@ip-10-130-49-7 ~]$ aws cloudformation delete-stack --stack-name ${STACK_NAME}
CloudWatch
ダッシュボード
コマンド
aws cloudwatch delete-dashboards --dashboard-names ${DASHBOARD}
出力
[cloudshell-user@ip-10-130-49-7 ~]$ aws cloudwatch delete-dashboards --dashboard-names ${DASHBOARD}
アラーム
コマンド
aws cloudwatch delete-alarms --alarm-names ${ALARM_NAME}
出力
[cloudshell-user@ip-10-130-49-7 ~]$ aws cloudwatch delete-alarms --alarm-names ${ALARM_NAME}
ログ
コマンド
aws logs delete-log-group \
--log-group-name ${LOG_ACCESS_NAME}
aws logs delete-log-group \
--log-group-name ${LOG_ERROR_NAME}
出力
[cloudshell-user@ip-10-130-49-7 ~]$ aws logs delete-log-group \
> --log-group-name ${LOG_ACCESS_NAME}
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ aws logs delete-log-group \
> --log-group-name ${LOG_ERROR_NAME}
イベント
コマンド
aws events remove-targets \
--rule ${EVENT_RULE_NAME} --ids 1
aws events delete-rule \
--name ${EVENT_RULE_NAME}
出力
[cloudshell-user@ip-10-130-49-7 ~]$ aws events remove-targets \
> --rule ${EVENT_RULE_NAME} --ids 1
{
"FailedEntryCount": 0,
"FailedEntries": []
}
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ aws events delete-rule \
> --name ${EVENT_RULE_NAME}
SNS
指定のSidが含まれるステートメントを削除
コマンド
# 現在のSNSトピックのポリシーを取得
CURRENT_POLICY=$(
aws sns get-topic-attributes \
--topic-arn ${TOPIC_ARN} \
--query "Attributes.Policy" \
--output text
) \
&& echo ${CURRENT_POLICY}
# 削除したいSidを指定
SID_TO_DELETE=${EVENT_RULE_NAME} \
&& echo ${SID_TO_DELETE}
# 現在のポリシーをJSON形式に変換
CURRENT_POLICY_JSON=$(echo ${CURRENT_POLICY} | jq .) \
&& echo ${CURRENT_POLICY_JSON}
# 指定のSidが含まれるステートメントを削除
UPDATED_POLICY=$(
echo ${CURRENT_POLICY_JSON} | jq 'del(.Statement[] | select(.Sid == "'${SID_TO_DELETE}'"))'
) \
&& echo ${UPDATED_POLICY}
# 更新されたポリシーを文字列に変換
UPDATED_POLICY_STR=$(echo ${UPDATED_POLICY} | jq -c .) \
&& echo ${UPDATED_POLICY_STR}
# 更新されたポリシーを設定
aws sns set-topic-attributes \
--topic-arn ${TOPIC_ARN} \
--attribute-name Policy \
--attribute-value "${UPDATED_POLICY_STR}"
出力
[cloudshell-user@ip-10-130-49-7 ~]$ # 現在のSNSトピックのポリシーを取得
[cloudshell-user@ip-10-130-49-7 ~]$ CURRENT_POLICY=$(
> aws sns get-topic-attributes \
> --topic-arn ${TOPIC_ARN} \
> --query "Attributes.Policy" \
> --output text
> ) \
> && echo ${CURRENT_POLICY}
{"Version":"2008-10-17","Id":"__default_policy_ID","Statement":[{"Sid":"__default_statement_ID","Effect":"Allow","Principal":{"AWS":"*"},"Action":["SNS:GetTopicAttributes","SNS:SetTopicAttributes","SNS:AddPermission","SNS:RemovePermission","SNS:DeleteTopic","SNS:Subscribe","SNS:ListSubscriptionsByTopic","SNS:Publish"],"Resource":"arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic","Condition":{"StringEquals":{"AWS:SourceOwner":"999999999999"}}},{"Sid":"monitoring-1-event-rule","Effect":"Allow","Principal":{"Service":"events.amazonaws.com"},"Action":"sns:Publish","Resource":"arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic"}]}
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # 削除したいSidを指定
[cloudshell-user@ip-10-130-49-7 ~]$ SID_TO_DELETE=${EVENT_RULE_NAME} \
> && echo ${SID_TO_DELETE}
monitoring-1-event-rule
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # 現在のポリシーをJSON形式に変換
[cloudshell-user@ip-10-130-49-7 ~]$ CURRENT_POLICY_JSON=$(echo ${CURRENT_POLICY} | jq .) \
> && echo ${CURRENT_POLICY_JSON}
{ "Version": "2008-10-17", "Id": "__default_policy_ID", "Statement": [ { "Sid": "__default_statement_ID", "Effect": "Allow", "Principal": { "AWS": "*" }, "Action": [ "SNS:GetTopicAttributes", "SNS:SetTopicAttributes", "SNS:AddPermission", "SNS:RemovePermission", "SNS:DeleteTopic", "SNS:Subscribe", "SNS:ListSubscriptionsByTopic", "SNS:Publish" ], "Resource": "arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic", "Condition": { "StringEquals": { "AWS:SourceOwner": "999999999999" } } }, { "Sid": "monitoring-1-event-rule", "Effect": "Allow", "Principal": { "Service": "events.amazonaws.com" }, "Action": "sns:Publish", "Resource": "arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic" } ] }
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # 指定のSidが含まれるステートメントを削除
[cloudshell-user@ip-10-130-49-7 ~]$ UPDATED_POLICY=$(
> echo ${CURRENT_POLICY_JSON} | jq 'del(.Statement[] | select(.Sid == "'${SID_TO_DELETE}'"))'
> ) \
> && echo ${UPDATED_POLICY}
{ "Version": "2008-10-17", "Id": "__default_policy_ID", "Statement": [ { "Sid": "__default_statement_ID", "Effect": "Allow", "Principal": { "AWS": "*" }, "Action": [ "SNS:GetTopicAttributes", "SNS:SetTopicAttributes", "SNS:AddPermission", "SNS:RemovePermission", "SNS:DeleteTopic", "SNS:Subscribe", "SNS:ListSubscriptionsByTopic", "SNS:Publish" ], "Resource": "arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic", "Condition": { "StringEquals": { "AWS:SourceOwner": "999999999999" } } } ] }
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # 更新されたポリシーを文字列に変換
[cloudshell-user@ip-10-130-49-7 ~]$ UPDATED_POLICY_STR=$(echo ${UPDATED_POLICY} | jq -c .) \
> && echo ${UPDATED_POLICY_STR}
{"Version":"2008-10-17","Id":"__default_policy_ID","Statement":[{"Sid":"__default_statement_ID","Effect":"Allow","Principal":{"AWS":"*"},"Action":["SNS:GetTopicAttributes","SNS:SetTopicAttributes","SNS:AddPermission","SNS:RemovePermission","SNS:DeleteTopic","SNS:Subscribe","SNS:ListSubscriptionsByTopic","SNS:Publish"],"Resource":"arn:aws:sns:ap-northeast-1:999999999999:monitoring-1-topic","Condition":{"StringEquals":{"AWS:SourceOwner":"999999999999"}}}]}
[cloudshell-user@ip-10-130-49-7 ~]$
[cloudshell-user@ip-10-130-49-7 ~]$ # 更新されたポリシーを設定
[cloudshell-user@ip-10-130-49-7 ~]$ aws sns set-topic-attributes \
> --topic-arn ${TOPIC_ARN} \
> --attribute-name Policy \
> --attribute-value "${UPDATED_POLICY_STR}"
トピック削除
コマンド
aws sns delete-topic --topic-arn ${TOPIC_ARN}
出力
[cloudshell-user@ip-10-130-49-7 ~]$ aws sns delete-topic --topic-arn ${TOPIC_ARN}