AWS by Web Services Job

This job uses the AWS by Web Services adapter.

Discovering AWS, there is no IP address to trigger on, so the job starts against a Data Flow Probe where there is at least one IP address in the range. (This is a UCMDB work flow requirement.)

Before exploring any service, UCMDB needs to take information about the account the discovery user belongs to. This is done using IAM service; the user has an ARN (Amazon Resource Name) where the account ID is stored.

Auto Scaling Group Service Discovery

• Get available Auto Scaling Groups from each region

• Get all defined attributes' values
• Set up the relationship between Auto Scaling Group and Account
• Set up the relationship between Auto Scaling Group and Region
• Get all EC2 instanes of this group, and set up the relationship between EC2 instance and group
• Data is immediately reported to UCMDB after discovery of each service

AWS CloudFormation Discovery

• Get stacks for each region
• Get stack resources for each stack and setup the relationship between AWS stack and AWS resources
• Data is immediately reported to UCMDB after discovery of each service

EC2 Service Discovery

• Get Regions and availability zones
• Get running instances; without this information all EBS discovery fails
• Get detailed information about EBS which is used as mapped devices for each running instance
• Get EBS Snapshot information for mapped EBS only
• Get AMI for each running instance; if AMI is not found, the corresponding instances are not reported to UCMDB
• Get Elastic IP information for each instance
• Get VPCs and subnets

• Get EC2 Installed Software if the discoverInstalledSoftware parameter value is set to true

• EC2 installed software is based on EC2 running instance and AWS systems manager

• Data is immediately reported to UCMDB after discovery of each service

ECR Service Discovery

• Get Images used by Containers
• Get Repositories
• Link Images to Repositories that Images belong to
• Data is immediately reported to UCMDB after discovery of each service

ECS Service Discovery

• Get Task Definitions
• Get Clusters
• Get Services, Tasks, and EC2 Instances in Cluster
• Get Containers in Task, and link them to the EC2 Instance that they belong to
• Data is immediately reported to UCMDB after discovery of each service

ELB Service Discovery

• Get Classic Load Balancer and Application Load Balancer
• Get the related listener and target group
• Get EC2 from the listener or target group
• Link Load Balancer with the listener and EC2 instances (EC2 instances are in running status and with AMI available)
• Data is immediately reported to UCMDB after discovery of each service

S3 Bucket Service Discovery

• Get S3 Buckets
• Get S3 Bucket Region
• Get S3 Bucket Versioning Status
• Get S3 Bucket Replication Status
• Data is immediately reported to UCMDB after discovery of each service

RDS Service Discovery

• Get database instances; without this information all RDS discovery fails

• Get all available engines to enrich information for every database instance server

• Get security and parameter groups to enrich available information in database instances

• Get database snapshots

• Data is immediately reported to UCMDB after discovery of each service