Configuring AWS agent for Lambda monitoring

To collect metrics and versions for the AWS Lambda functions, the following IAM permissions must be granted to the AWS agent:

• cloudwatch:GetMetricStatistics
• cloudwatch:GetMetricData
• lambda:ListTags
• lambda:ListFunctions
• lambda:ListVersionsByFunction
• lambda:GetFunctionConfiguration
• lambda:ListEventSourceMappings

For more information about granting IAM permissions to the AWS agent, see the AWS agent installation documentation.

To enable monitoring Lambda versions, grant the lambda:ListVersionsByFunction IAM permission to the AWS agent. If the required permission is missing, Instana aggregates the metrics for all versions.

By default, Instana monitors the five most recent versions of each Lambda function individually. You can use the following configuration to set the number of versions for which Instana fetches data:

com.instana.plugin.aws.lambda:
  number_of_versions: 3 # default 5

Up to 20 versions of Lambda can be configured.

You can disable monitoring individual Lambda versions, and then Instana aggregates the metrics for all versions. In this case, the aggregating metrics are attached to the \$LATEST version for the Lambda function.

To entirely disable monitoring of Lambda instances, use the following configuration:

com.instana.plugin.aws.lambda:
  enabled: false

To disable only the retrieval of versions data, use the following configuration:

com.instana.plugin.aws.lambda:
  fetch_versions: false

Metrics for Lambda are retrieved every 5 minutes. You can change the interval by using the following agent configuration in <agent_install_dir>/etc/instana/configuration.yml:

com.instana.plugin.aws.lambda:
  cloudwatch_period: 300

You can specify how often sensors poll the AWS tagged resources by using the tagged-services-poll-rate configuration property (default: 300 seconds).

To define how often sensors poll the tagged resources use following configuration:

com.instana.plugin.aws:
  tagged-services-poll-rate: 60 #default 300

You can define multiple tags that are separated by a comma. Use tags as a key-value pair separated by the : character. To simplify the configuration process, you can define the tags that you want to include or exclude from discovery. When you define tags in both the lists (include and exclude), the exclude list takes higher priority. If services filtering is not required, do not define the configuration. It’s not mandatory to define all values to enable filtering.

To include services by tags into discovery, use the following configuration:

com.instana.plugin.aws.lambda:
  include_tags: # Comma separated list of tags in key:value format (e.g. env:prod,env:staging)

To exclude services by tags from discovery, use the following configuration:

com.instana.plugin.aws.lambda:
  exclude_tags: # Comma separated list of tags in key:value format (e.g. env:dev,env:test)

AWS services without tags are monitored by default, but can be excluded by setting the include_untagged field to false:

com.instana.plugin.aws.lambda:
  include_untagged: false # True value by default

To set up monitoring of multiple AWS accounts with one AWS agent in the same region, see the Monitoring multiple AWS accounts documentation.

To override which profiles must be used to monitor Lambda, use the following configuration:

com.instana.plugin.aws.lambda:
  profile_names:
    - 'profile2'
    - 'profile3'

To override the IAM Roles used to monitor Lambda, use the following configuration:

com.instana.plugin.aws.lambda:
  role_arns:
    - 'arn:aws:iam::<account_1_id>:role/<role_1_name>'
    - 'arn:aws:iam::<account_2_id>:role/<role_2_name>'