Adding an AWS target

Add an AWS target in the Turbonomic user interface to monitor and optimize workloads in your AWS environment. This target specifies the IAM identities that Turbonomic will use to connect to AWS.

Prerequisites

Before performing this task, be sure to set up the required IAM identities in AWS.

  • Multi-account target

    This target has access to multiple AWS accounts. With a multi-account target, you can manage your AWS accounts in Turbonomic efficiently.

    For this target, set up an IAM role or IAM user for the management account and a cross-account IAM role for member accounts.

  • Single-account target

    This target has access to a single AWS account. Set up an IAM role or IAM user for the account.

Note:

It is possible to configure a multi-account target along with a single-account target. For example, you can configure a multi-account target to access your AWS management account and all but one member accounts, and a single-account target to access the excluded member account. When you configure multiple targets, be sure that no AWS account exists in more than one target. Otherwise, a notification about duplicate targets displays in the Target configuration page because there are multiple targets accessing the same account. You will need to either update or delete targets until only one of them is accessing that account.

Adding a multi-account AWS target

  1. Go to Settings > Target configuration.

  2. On the Target configuration page, click Add Target.

  3. On the Select target page, click AWS.

  4. In the side panel, review the connection requirements and then click Connect Target.

  5. On the Connection overview page, configure the following settings:

    • Display name

      Specify a name that uniquely identifies this connection.

      This name is for display purposes only and does not need to match any name in AWS.

    • Account scope

      Choose Multiple accounts.

      Before proceeding, be sure to set up an IAM role or IAM user for the management account and a cross-account IAM role for member accounts.

    • AWS GovCloud (US) account toggle

      When enabled, Turbonomic identifies the target as an AWS GovCloud account.

  6. On the Management account access page, configure the following settings.

    • If you set up an IAM role for the management account:

      1. Click the IAM Role tab.

      2. Specify the ARN (Amazon Resource Name) for your IAM role.

        ARN authorizes a secure connection that grants Turbonomic the specific permissions that it needs to manage resources without sharing your security credentials.

    • If you set up an IAM user for the management account:

      1. Click the IAM User tab.

      2. Specify the access key ID associated with the IAM user.

        Access keys are long-term credentials for an IAM user or the AWS account root user.

        View security best practices in IAM

      3. Specify the secret access key associated with the IAM user.

  7. On the Member accounts access page, configure the following settings.

    1. Specify the IAM role name on this page. Use only alphanumeric characters and/or the following characters:

      + = , . @ _ -

      Specify the name (not the ARN) of the cross-account IAM role that Turbonomic uses to automatically discover member accounts in your organization. The name must be unique and should not be used in any IAM roles assigned to your member accounts.

    2. Review and select a policy that meets your permission requirements.

    3. Click Download template to download the CloudFormation template based on your selected policy.

    4. If the management account uses an IAM role:

      Click Launch CloudFormation to create a StackSet that deploys IAM roles in each member account. For detailed instructions, see this topic.

      If the management account uses an IAM user:

      Click Launch CloudFormation to create a StackSet that deploys IAM roles in each member account. For detailed instructions, see this topic.

  8. On the Proxy configuration page, configure the following settings if you connect through a proxy:

    • Proxy hostname or IP address

      Specify the address of the proxy used for this target.

    • Proxy port

      Specify the port to use with the proxy used for this target. By default, the port is 8080.

    • Proxy username

      Specify the username to use with the proxy.

    • Proxy password

      Specify the password to use with the proxy.

    • Connect by using HTTPS

      Select this option if Turbonomic connects to the proxy through HTTPS.

Adding a single-account AWS target

  1. Go to Settings > Target configuration.

  2. On the Target configuration page, click Add Target.

  3. On the Select target page, click AWS.

  4. In the side panel, review the connection requirements and then click Connect Target.

  5. On the Connection overview page, configure the following settings:

    • Display name

      Specify a name that uniquely identifies this connection.

      This name is for display purposes only and does not need to match any name in AWS.

    • Account scope

      Choose Single account.

      Before proceeding, be sure to set up an IAM role or IAM user for the account.

    • AWS GovCloud (US) account toggle

      When enabled, Turbonomic identifies the target as an AWS GovCloud account.

  6. On the Account access page, configure the following settings.

    • If you set up an IAM role:

      1. Click the IAM Role tab.

      2. Specify the ARN (Amazon Resource Name) for your IAM role.

        ARN authorizes a secure connection that grants Turbonomic the specific permissions that it needs to manage resources without sharing your security credentials.

    • If you set up an IAM user:

      1. Click the IAM User tab.

      2. Specify the access key ID associated with the IAM user.

        Access keys are long-term credentials for an IAM user or the AWS account root user.

        View security best practices in IAM

      3. Specify the secret access key associated with the IAM user.

  7. On the Proxy configuration page, configure the following settings if you connect through a proxy:

    • Proxy hostname or IP address

      Specify the address of the proxy used for this target.

    • Proxy port

      Specify the port to use with the proxy used for this target. By default, the port is 8080.

    • Proxy username

      Specify the username to use with the proxy.

    • Proxy password

      Specify the password to use with the proxy.

    • Connect by using HTTPS

      Select this option if Turbonomic connects to the proxy through HTTPS.