Dynatrace calls AWS API acmpca/ ListCertificateAuthorities to get resource details.
This requires Dynatrace to have the following IAM action permissions: acm-pca:ListCertificateAuthorities.
Relationships
Edge type
Destination node
uses
AWS::S3::Bucket
AWS metrics
Amazon CloudWatch namespace AWS/ACMPrivateCA
Auto-discovery
Dimensions
PrivateCAArn
Recommended metrics
AmazonMQ
AWS::AmazonMQ::Broker
AWS topology
Dynatrace calls AWS API mq/ ListBrokers to list resources and calls mq/ DescribeBroker to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: mq:ListBrokers, mq:DescribeBroker.
Relationships
Edge type
Destination node
uses
AWS::EC2::SecurityGroup
is_attached_to
AWS::EC2::Subnet
uses
AWS::AmazonMQ::Configuration
uses
AWS::Logs::LogGroup
uses
AWS::Logs::LogGroup
AWS metrics
Amazon CloudWatch namespace AWS/AmazonMQ
Auto-discovery
Dimensions
Broker
Broker, Node
Broker, Topic
Broker, Queue
Broker, Queue, VirtualHost
Broker, Topic, NetworkConnector
Broker, Queue, NetworkConnector
Recommended metrics
AWS::AmazonMQ::Configuration
AWS topology
Dynatrace calls AWS API mq/ ListConfigurations to list resources and calls mq/ DescribeConfiguration to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: mq:ListConfigurations, mq:DescribeConfiguration.
ApiGateway
AWS::ApiGateway::RestApi
AWS topology
Dynatrace calls AWS API apigateway/ GetRestApis to get resource details.
AWS metrics
Amazon CloudWatch namespace AWS/ApiGateway
Auto-discovery
Dimensions
ApiName
ApiName, Method, Resource, Stage
ApiName, Stage
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS logs
Logs from API-Gateway-Access-Logs_(?<RestApiId>[a-z0-9]+)/.* Log Group link with the Dynatrace entity for AWS::ApiGateway::RestApi.
`.
AWS::ApiGateway::Stage
AWS topology
Dynatrace calls AWS API apigateway/ GetRestApis to list resources and calls apigateway/ GetStages to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::ApiGateway::RestApi
ApiGatewayV2
AWS::ApiGatewayV2::Api
AWS topology
Dynatrace calls AWS API apigatewayv2/ GetApis to get resource details.
AWS metrics
Amazon CloudWatch namespace AWS/ApiGateway
Auto-discovery
Dimensions
ApiId
ApiId, Stage
ApiId, Method, Resource, Stage
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS logs
Logs from API-GatewayV2-Access-Logs.* Log Group link with the Dynatrace entity for AWS::ApiGatewayV2::Api.
AWS::ApiGatewayV2::Stage
AWS topology
Dynatrace calls AWS API apigatewayv2/ GetApis to list resources and calls apigatewayv2/ GetStages to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::ApiGatewayV2::Api
AppRunner
AWS::AppRunner::AutoScalingConfiguration
AWS topology
Dynatrace calls AWS API apprunner/ ListAutoScalingConfigurations to list resources and calls apprunner/ DescribeAutoScalingConfiguration to get details for each resource.
AWS::AppRunner::Service
AWS topology
Dynatrace calls AWS API apprunner/ ListServices to list resources and calls apprunner/ DescribeService to get details for each resource.
Relationships
Edge type
Destination node
uses
AWS::AppRunner::AutoScalingConfiguration
is_attached_to
AWS::AppRunner::VpcConnector
uses
AWS::IAM::Role
AWS metrics
Amazon CloudWatch namespace AWS/AppRunner
Auto-discovery
Dimensions
ServiceName, ServiceID
ServiceName, ServiceID, Instance
Recommended metrics
AWS logs
Logs from /aws/apprunner/(?<ServiceName>[a-zA-Z0-9_-]+)/(?<ServiceId>[a-z0-9]+)/(?<LogType>.*) Log Group link with the Dynatrace entity for AWS::AppRunner::Service.
AWS::AppRunner::VPCIngressConnection
AWS topology
Dynatrace calls AWS API apprunner/ ListVpcIngressConnections to list resources and calls apprunner/ DescribeVpcIngressConnection to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::AppRunner::Service
routes_to
AWS::EC2::VPCEndpoint
is_attached_to
AWS::EC2::VPC
AWS::AppRunner::VpcConnector
AWS topology
Dynatrace calls AWS API apprunner/ ListVpcConnectors to list resources and calls apprunner/ DescribeVpcConnector to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
AppStream
AWS::AppStream::Fleet
AWS topology
Dynatrace calls AWS API appstream/ DescribeFleets to get resource details.
This requires Dynatrace to have the following IAM action permissions: appstream:DescribeFleets.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
AWS metrics
Amazon CloudWatch namespace AWS/AppStream
Auto-discovery
Dimensions
FleetName
Recommended metrics
AWS::AppStream::Stack
AWS metrics
Amazon CloudWatch namespace AWS/AppStream
Auto-discovery
Dimensions
StackName
Recommended metrics
AppSync
AWS::AppSync::GraphQLApi
AWS topology
Dynatrace calls AWS API appsync/ ListGraphqlApis to get resource details.
This requires Dynatrace to have the following IAM action permissions: appsync:ListGraphqlApis.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
is_attached_to
AWS::Cognito::UserPool
is_attached_to
AWS::Lambda::Function
is_attached_to
AWS::WAFv2::WebACL
AWS metrics
Amazon CloudWatch namespace AWS/AppSync
Auto-discovery
Dimensions
GraphQLAPIId
GraphQLAPIId, Field
GraphQLAPIId, Operation
GraphQLAPIId, DataSource
Recommended metrics
Athena
AWS::Athena::CapacityReservation
AWS metrics
Amazon CloudWatch namespace AWS/Athena
Auto-discovery
Dimensions
Capacity Reservation
WorkGroup, Capacity Reservation
Recommended metrics
AWS::Athena::WorkGroup
AWS topology
Dynatrace calls AWS API athena/ ListWorkGroups to list resources and calls athena/ GetWorkGroup to get details for each resource.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/Athena
Auto-discovery
Dimensions
WorkGroup
WorkGroup, QueryState, QueryType
Recommended metrics
AutoScaling
AWS::AutoScaling::AutoScalingGroup
AWS topology
Dynatrace calls AWS API autoscaling/ DescribeAutoScalingGroups to get resource details.
Relationships
Edge type
Destination node
uses
AWS::EC2::LaunchTemplate
is_attached_to
AWS::ElasticLoadBalancing::LoadBalancer
is_attached_to
AWS::ElasticLoadBalancingV2::TargetGroup
contains
AWS::EC2::Instance
AWS metrics
Amazon CloudWatch namespace AWS/AutoScaling
Auto-discovery
Dimensions
AutoScalingGroupName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
Availability_Zone
AWS::Availability_Zone
AWS topology
Dynatrace calls AWS API ec2/ DescribeAvailabilityZones to get resource details.
Sanitized fields
configuration.zoneName
configuration.optInStatus
configuration.messages
Relationships
Edge type
Destination node
is_part_of
AWS::Region
Backup
AWS::Backup::BackupPlan
AWS topology
Dynatrace calls AWS API backup/ ListBackupPlans to list resources and calls backup/ GetBackupPlan to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: backup:ListBackupPlans, backup:GetBackupPlan.
AWS::Backup::BackupVault
AWS topology
Dynatrace calls AWS API backup/ ListBackupVaults to get resource details.
This requires Dynatrace to have the following IAM action permissions: backup:ListBackupVaults.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
uses
AWS::SNS::Topic
AWS metrics
Amazon CloudWatch namespace AWS/Backup
Auto-discovery
Dimensions
BackupVaultName
BackupVaultName, ResourceType
Recommended metrics
Bedrock
AWS::Bedrock::Agent
AWS topology
Dynatrace calls AWS API bedrockagent/ ListAgents to list resources and calls bedrockagent/ GetAgent to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: bedrock:ListAgents, bedrock:GetAgent.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
is_attached_to
AWS::Bedrock::GuardRail
AWS::Bedrock::AgentAlias
AWS topology
Relationships
Edge type
Destination node
is_attached_to
AWS::Bedrock::Agent
AWS metrics
Amazon CloudWatch namespace AWS/Bedrock/Agents
Auto-discovery
Dimensions
AgentAliasArn, ModelId, Operation
Recommended metrics
AWS::Bedrock::Guardrail
AWS topology
Dynatrace calls AWS API bedrock/ ListGuardrails to list resources and calls bedrock/ GetGuardrail to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: bedrock:ListGuardrails, bedrock:GetGuardrail.
Dynatrace calls AWS API bedrockagent/ ListKnowledgeBases to list resources and calls bedrockagent/ GetKnowledgeBase to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: bedrock:ListKnowledgeBases, bedrock:GetKnowledgeBase.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
uses
AWS::S3::Bucket
uses
AWS::Redshift::Cluster
uses
AWS::RedshiftServerless::Workgroup
uses
AWS::OpenSearchServerless::Collection
uses
AWS::OpenSearch::Domain
uses
AWS::RDS::DBCluster
Cassandra
AWS::Cassandra::Keyspace
AWS topology
Dynatrace calls AWS API keyspaces/ ListKeyspaces to list resources and calls keyspaces/ GetKeyspace to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: cassandra:ListKeyspaces, cassandra:GetKeyspace.
AWS metrics
Amazon CloudWatch namespace AWS/Cassandra
Auto-discovery
Dimensions
Keyspace, Operation
Recommended metrics
AWS::Cassandra::Stream
AWS metrics
Amazon CloudWatch namespace AWS/Cassandra
Auto-discovery
Dimensions
Keyspace, TableName, StreamLabel
Keyspace, TableName, StreamLabel, Operation
Recommended metrics
AWS::Cassandra::Table
AWS topology
Dynatrace calls AWS API keyspaces/ ListKeyspaces and keyspaces/ ListTables to list resource. For resource details Dynatrace calls None/ None.
This requires Dynatrace to have the following IAM action permissions: cassandra:ListKeyspaces, cassandra:ListTables.
Relationships
Edge type
Destination node
belongs_to
AWS::Cassandra::Keyspace
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/Cassandra
Auto-discovery
Dimensions
Keyspace, TableName
Keyspace, TableName, Operation
Recommended metrics
CertificateManager
AWS::CertificateManager::Certificate
AWS topology
Dynatrace calls AWS API acm/ ListCertificates to get resource details.
This requires Dynatrace to have the following IAM action permissions: acm:ListCertificates.
Relationships
Edge type
Destination node
uses
AWS::ACMPCA::CertificateAuthority
CloudFront
AWS::CloudFront::Distribution
AWS topology
Dynatrace calls AWS API cloudfront/ ListDistributions to list resources and calls cloudfront/ GetDistribution to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::WAFv2::WebACL
is_attached_to
AWS::CertificateManager::Certificate
uses
AWS::IAM::ServerCertificate
routes_to
AWS::S3::Bucket
AWS metrics
Amazon CloudWatch namespace AWS/CloudFront
Auto-discovery
Dimensions
DistributionId
DistributionId, Region
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS::CloudFront::Function
AWS metrics
Amazon CloudWatch namespace AWS/CloudFront
Auto-discovery
Dimensions
FunctionName
FunctionName, Region
FunctionName, DistributionId, Region
Recommended metrics
AWS::CloudFront::KeyValueStore
AWS metrics
Amazon CloudWatch namespace AWS/CloudFront
Auto-discovery
Dimensions
KeyValueStoreId
KeyValueStoreId, Region
KeyValueStoreId, DistributionId
Recommended metrics
CloudHSM
AWS::CloudHSM::Cluster
AWS topology
Dynatrace calls AWS API cloudhsmv2/ DescribeClusters to get resource details.
This requires Dynatrace to have the following IAM action permissions: cloudhsm:DescribeClusters.
Relationships
Edge type
Destination node
uses
AWS::EC2::SecurityGroup
is_attached_to
AWS::EC2::Subnet
is_attached_to
AWS::EC2::VPC
AWS metrics
Amazon CloudWatch namespace AWS/CloudHSM
Auto-discovery
Dimensions
ClusterId
ClusterId, HsmId
Recommended metrics
CloudTrail
AWS::CloudTrail::Trail
AWS topology
Dynatrace calls AWS API cloudtrail/ ListTrails to list resources and calls cloudtrail/ GetTrail to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: cloudtrail:ListTrails, cloudtrail:GetTrail.
Relationships
Edge type
Destination node
uses
AWS::S3::Bucket
uses
AWS::Logs::LogGroup
uses
AWS::SNS::Topic
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/CloudTrail
Auto-discovery
Dimensions
TrailName
Recommended metrics
CodeBuild
AWS::CodeBuild::Project
AWS topology
Dynatrace calls AWS API codebuild/ ListProjects to list resources and calls codebuild/ BatchGetProjects to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: codebuild:ListProjects, codebuild:BatchGetProjects.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
AWS metrics
Amazon CloudWatch namespace AWS/CodeBuild
Auto-discovery
Dimensions
ProjectName
ProjectName, BuildId
ProjectName, BuildId, BuildNumber
Recommended metrics
Cognito
AWS::Cognito::IdentityPool
AWS metrics
Amazon CloudWatch namespace AWS/Cognito
Auto-discovery
Dimensions
UserPool, UserPoolClient
UserPool, UserPoolClient, IdentityProvider
Recommended metrics
AWS::Cognito::UserPool
AWS topology
Dynatrace calls AWS API cognitoidentityprovider/ ListUserPools to list resources and calls cognitoidentityprovider/ DescribeUserPool to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: cognito-idp:ListUserPools, cognito-idp:DescribeUserPool.
Relationships
Edge type
Destination node
uses
AWS::Lambda::Function
uses
AWS::SNS::Topic
Connect
AWS::Connect::Instance
AWS topology
Dynatrace calls AWS API connect/ ListInstances to list resources and calls connect/ DescribeInstance to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: connect:ListInstances, connect:DescribeInstance.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
AWS metrics
Amazon CloudWatch namespace AWS/Connect
Auto-discovery
Dimensions
InstanceId
InstanceId, MetricGroup
InstanceId, MetricGroup, QueueName
InstanceId, MetricGroup, AgentId
InstanceId, API
Recommended metrics
Core
AWS::Account
AWS topology
AWS::Region
AWS topology
DAX
AWS::DAX::Cluster
AWS topology
Dynatrace calls AWS API dax/ DescribeClusters to get resource details.
This requires Dynatrace to have the following IAM action permissions: dax:DescribeClusters.
Relationships
Edge type
Destination node
uses
AWS::DAX::SubnetGroup
uses
AWS::EC2::SecurityGroup
AWS metrics
Amazon CloudWatch namespace AWS/DAX
Auto-discovery
Dimensions
ClusterId
ClusterId, NodeId
Recommended metrics
AWS::DAX::SubnetGroup
AWS topology
Dynatrace calls AWS API dax/ DescribeSubnetGroups to get resource details.
This requires Dynatrace to have the following IAM action permissions: dax:DescribeSubnetGroups.
Relationships
Edge type
Destination node
uses
AWS::EC2::Subnet
is_attached_to
AWS::EC2::VPC
DMS
AWS::DMS::ReplicationInstance
AWS topology
Dynatrace calls AWS API databasemigration/ DescribeReplicationInstances to get resource details.
This requires Dynatrace to have the following IAM action permissions: dms:DescribeReplicationInstances.
Dynatrace calls AWS API datasync/ ListTasks to list resources and calls datasync/ DescribeTask to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: datasync:ListTasks, datasync:DescribeTask.
Relationships
Edge type
Destination node
uses
AWS::DataSync::LocationS3
uses
AWS::DataSync::LocationS3
uses
AWS::Logs::LogGroup
AWS metrics
Amazon CloudWatch namespace AWS/DataSync
Auto-discovery
Dimensions
TaskId
Recommended metrics
DirectConnect
AWS::DirectConnect::DXCon
AWS topology
Dynatrace calls AWS API directconnect/ DescribeConnections to get resource details.
This requires Dynatrace to have the following IAM action permissions: directconnect:DescribeConnections.
AWS metrics
Amazon CloudWatch namespace AWS/DX
Auto-discovery
Dimensions
ConnectionId
ConnectionId, OpticalLaneNumber
ConnectionId, VirtualInterfaceId
Recommended metrics
AWS::DirectConnect::DXVIF
AWS topology
Dynatrace calls AWS API directconnect/ DescribeVirtualInterfaces to get resource details.
This requires Dynatrace to have the following IAM action permissions: directconnect:DescribeVirtualInterfaces.
Sanitized fields
configuration.authKey
configuration.customerRouterConfig
configuration.bgpPeers[].authKey
Relationships
Edge type
Destination node
belongs_to
AWS::DirectConnect::DXCon
routes_to
AWS::EC2::VPNGateway
DocDB
AWS::DocDB::DBCluster
AWS metrics
Amazon CloudWatch namespace AWS/DocDB
Auto-discovery
Dimensions
DBClusterIdentifier
DBClusterIdentifier, Role
Recommended metrics
AWS::DocDB::DBInstance
AWS metrics
Amazon CloudWatch namespace AWS/DocDB
Auto-discovery
Dimensions
DBInstanceIdentifier
Recommended metrics
DynamoDB
AWS::DynamoDB::Table
AWS topology
Dynatrace calls AWS API dynamodb/ ListTables to list resources and calls dynamodb/ DescribeTable to get details for each resource.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/DynamoDB
Auto-discovery
Dimensions
TableName
GlobalSecondaryIndexName, TableName
Operation, TableName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
EC2
AWS::EC2::ClientVpnEndpoint
AWS topology
Dynatrace calls AWS API ec2/ DescribeClientVpnEndpoints to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
AWS::EC2::CustomerGateway
AWS topology
Dynatrace calls AWS API ec2/ DescribeCustomerGateways to get resource details.
AWS::EC2::DHCPOptions
AWS topology
Dynatrace calls AWS API ec2/ DescribeDhcpOptions to get resource details.
AWS::EC2::EIP
AWS topology
Dynatrace calls AWS API ec2/ DescribeAddresses to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::NetworkInterface
is_attached_to
AWS::EC2::Instance
AWS::EC2::EIPAssociation
AWS topology
Dynatrace calls AWS API ec2/ DescribeAddresses to get resource details.
This requires Dynatrace to have the following IAM action permissions: ec2:DescribeAddresses.
AWS::EC2::EgressOnlyInternetGateway
AWS topology
Dynatrace calls AWS API ec2/ DescribeEgressOnlyInternetGateways to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
AWS::EC2::FlowLog
AWS topology
Dynatrace calls AWS API ec2/ DescribeFlowLogs to get resource details.
This requires Dynatrace to have the following IAM action permissions: ec2:DescribeFlowLogs.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
is_attached_to
AWS::EC2::NetworkInterface
uses
AWS::IAM::Role
uses
AWS::S3::Bucket
uses
AWS::Logs::LogGroup
uses
AWS::KinesisFirehose::DeliveryStream
AWS::EC2::IAMInstanceProfileAssociation
AWS topology
Dynatrace calls AWS API ec2/ DescribeIamInstanceProfileAssociations to get resource details.
This requires Dynatrace to have the following IAM action permissions: ec2:DescribeIamInstanceProfileAssociations.
AWS::EC2::IPAM
AWS topology
Dynatrace calls AWS API ec2/ DescribeIpams to get resource details.
This requires Dynatrace to have the following IAM action permissions: ec2:DescribeIpams.
AWS::EC2::IPAMPool
AWS topology
Dynatrace calls AWS API ec2/ DescribeIpamPools to get resource details.
This requires Dynatrace to have the following IAM action permissions: ec2:DescribeIpamPools.
Relationships
Edge type
Destination node
belongs_to
AWS::EC2::IPAMScope
AWS metrics
Amazon CloudWatch namespace AWS/IPAM
Auto-discovery
Dimensions
IpamID, Region
Recommended metrics
AWS::EC2::IPAMScope
AWS topology
Dynatrace calls AWS API ec2/ DescribeIpamScopes to get resource details.
This requires Dynatrace to have the following IAM action permissions: ec2:DescribeIpamScopes.
Relationships
Edge type
Destination node
belongs_to
AWS::EC2::IPAM
AWS metrics
Amazon CloudWatch namespace AWS/IPAM
Auto-discovery
Dimensions
ScopeID, AddressFailmy
Recommended metrics
AWS::EC2::Instance
AWS topology
Dynatrace calls AWS API ec2/ DescribeInstances to get resource details.
Relationships
Edge type
Destination node
uses
AWS::EC2::SecurityGroup
is_attached_to
AWS::EC2::Subnet
is_attached_to
AWS::EC2::VPC
uses
AWS::IAM::InstanceProfile
AWS metrics
Amazon CloudWatch namespace AWS/EC2
Auto-discovery
Dimensions
InstanceId
AutoScalingGroupName, InstanceId
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS::EC2::InternetGateway
AWS topology
Dynatrace calls AWS API ec2/ DescribeInternetGateways to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
AWS::EC2::LaunchTemplate
AWS topology
AWS::EC2::NatGateway
AWS topology
Dynatrace calls AWS API ec2/ DescribeNatGateways to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
AWS metrics
Amazon CloudWatch namespace AWS/NATGateway
Auto-discovery
Dimensions
NatGatewayId
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS::EC2::NetworkAcl
AWS topology
Dynatrace calls AWS API ec2/ DescribeNetworkAcls to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::Subnet
is_attached_to
AWS::EC2::VPC
AWS::EC2::NetworkInterface
AWS topology
Dynatrace calls AWS API ec2/ DescribeNetworkInterfaces to get resource details.
Relationships
Edge type
Destination node
uses
AWS::EC2::SecurityGroup
is_attached_to
AWS::EC2::Instance
is_attached_to
AWS::EC2::Subnet
is_attached_to
AWS::EC2::VPC
AWS::EC2::NetworkInterfaceAttachment
AWS topology
Dynatrace calls AWS API ec2/ DescribeNetworkInterfaces to get resource details.
AWS::EC2::RouteTable
AWS topology
Dynatrace calls AWS API ec2/ DescribeRouteTables to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
routes_to
AWS::EC2::Instance
routes_to
AWS::EC2::NetworkInterface
routes_to
AWS::EC2::VPNGateway
routes_to
AWS::EC2::InternetGateway
routes_to
AWS::EC2::EgressOnlyInternetGateway
routes_to
AWS::EC2::VPCEndpoint
routes_to
AWS::EC2::NatGateway
routes_to
AWS::EC2::TransitGateway
routes_to
AWS::EC2::VPCPeeringConnection
AWS::EC2::SecurityGroup
AWS topology
Dynatrace calls AWS API ec2/ DescribeSecurityGroups to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
AWS::EC2::Snapshot
AWS topology
Dynatrace calls AWS API ec2/ DescribeSnapshots to get resource details.
This requires Dynatrace to have the following IAM action permissions: ec2:DescribeSnapshots.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS::EC2::Subnet
AWS topology
Dynatrace calls AWS API ec2/ DescribeSubnets to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
AWS::EC2::SubnetNetworkAclAttachment
AWS topology
Dynatrace calls AWS API ec2/ DescribeNetworkAcls to get resource details.
AWS::EC2::SubnetRouteTableAssociation
AWS topology
Dynatrace calls AWS API ec2/ DescribeRouteTables to get resource details.
AWS::EC2::TransitGateway
AWS topology
Dynatrace calls AWS API ec2/ DescribeTransitGateways to get resource details.
AWS metrics
Amazon CloudWatch namespace AWS/TransitGateway
Auto-discovery
Dimensions
TransitGateway
TransitGateway, AvailabilityZone
Recommended metrics
AWS::EC2::TransitGatewayAttachment
AWS topology
Dynatrace calls AWS API ec2/ DescribeTransitGatewayAttachments to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::TransitGateway
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::VPNConnection
is_attached_to
AWS::EC2::TransitGateway
AWS::EC2::VPC
AWS topology
Dynatrace calls AWS API ec2/ DescribeVpcs to get resource details.
Relationships
Edge type
Destination node
uses
AWS::EC2::DHCPOptions
AWS::EC2::VPCEndpoint
AWS topology
Dynatrace calls AWS API ec2/ DescribeVpcEndpoints to get resource details.
Dynatrace calls AWS API ecs/ ListClusters to list resources and calls ecs/ DescribeClusters to get details for each resource.
Sanitized fields
configuration.tags
Relationships
Edge type
Destination node
uses
AWS::ECS::CapacityProvider
AWS metrics
Amazon CloudWatch namespace ECS/ContainerInsights
Auto-discovery
Dimensions
ClusterName
ClusterName, ServiceName
ClusterName, TaskDefinitionFamily
ClusterName, TaskDefinitionFamily, VolumeName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS::ECS::ContainerInstance
AWS topology
Dynatrace calls AWS API ecs/ ListClusters and ecs/ ListContainerInstances to list resource. For resource details Dynatrace calls None/ None.
Relationships
Edge type
Destination node
belongs_to
AWS::ECS::Cluster
runs_on
AWS::EC2::Instance
runs_on
AWS::ECS::CapacityProvider
AWS::ECS::Service
AWS topology
Dynatrace calls AWS API ecs/ ListClusters and ecs/ ListServices to list resource. For resource details Dynatrace calls None/ None.
Relationships
Edge type
Destination node
belongs_to
AWS::ECS::Cluster
uses
AWS::ECS::TaskDefinition
uses
AWS::ECS::CapacityProvider
balanced_by
AWS::ElasticLoadBalancingV2::TargetGroup
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
uses
AWS::IAM::Role
AWS::ECS::Task
AWS topology
Dynatrace calls AWS API ecs/ ListClusters and ecs/ ListTasks to list resource. For resource details Dynatrace calls None/ None.
Relationships
Edge type
Destination node
belongs_to
AWS::ECS::Cluster
uses
AWS::ECS::TaskDefinition
runs_on
AWS::ECS::ContainerInstance
uses
AWS::ECS::CapacityProvider
is_part_of
AWS::ECS::Service
uses
AWS::EC2::NetworkInterface
uses
AWS::EC2::Subnet
uses
AWS::EC2::Volume
AWS::ECS::TaskDefinition
AWS topology
Dynatrace calls AWS API ecs/ ListTaskDefinitions to list resources and calls ecs/ DescribeTaskDefinition to get details for each resource.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
uses
AWS::IAM::Role
EFS
AWS::EFS::AccessPoint
AWS topology
Dynatrace calls AWS API efs/ DescribeAccessPoints to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EFS::FileSystem
AWS::EFS::FileSystem
AWS topology
Dynatrace calls AWS API efs/ DescribeFileSystems to get resource details.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
AWS metrics
Amazon CloudWatch namespace AWS/EFS
Auto-discovery
Dimensions
FileSystemId
FileSystemId, StorageClass
DestinationFileSystemId, FileSystemId
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS::EFS::MountTarget
AWS topology
Dynatrace calls AWS API efs/ DescribeFileSystems to list resources and calls efs/ DescribeMountTargets to get details for each resource.
Relationships
Edge type
Destination node
routes_to
AWS::EFS::FileSystem
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::NetworkInterface
EKS
AWS::EKS::Cluster
AWS topology
Dynatrace calls AWS API eks/ ListClusters to list resources and calls eks/ DescribeCluster to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
uses
AWS::EC2::SecurityGroup
uses
AWS::IAM::Role
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace ContainerInsights
Auto-discovery
Dimensions
ClusterName
ClusterName, Namespace
ClusterName, Namespace, PodName
ClusterName, Namespace, Service
ClusterName, NodeName, InstanceId
ClusterName, Namespace, PodName, FullPodName
Recommended metrics
AWS logs
Logs from /aws/eks/(?<ClusterName>[a-zA-Z0-9_-]+)/cluster Log Group link with the Dynatrace entity for AWS::EKS::Cluster.
AWS::EKS::Nodegroup
AWS topology
Dynatrace calls AWS API eks/ ListClusters and eks/ ListNodegroups to list resource. For resource details Dynatrace calls None/ None.
Relationships
Edge type
Destination node
belongs_to
AWS::EKS::Cluster
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
uses
AWS::EC2::LaunchTemplate
uses
AWS::IAM::Role
EMR
AWS::EMR::Cluster
AWS topology
Dynatrace calls AWS API emr/ ListClusters to list resources and calls emr/ DescribeCluster to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: elasticmapreduce:DescribeCluster.
Relationships
Edge type
Destination node
uses
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
uses
AWS::EC2::SecurityGroup
uses
AWS::EC2::SecurityGroup
uses
AWS::EC2::SecurityGroup
uses
AWS::EC2::SecurityGroup
AWS metrics
Amazon CloudWatch namespace AWS/ElasticMapReduce
Auto-discovery
Dimensions
JobFlowId
Recommended metrics
EMRContainers
AWS::EMRContainers::ManagedEndpoint
AWS topology
Dynatrace calls AWS API emrcontainers/ ListVirtualClusters and emrcontainers/ ListManagedEndpoints to list resource. For resource details Dynatrace calls None/ None.
Relationships
Edge type
Destination node
belongs_to
AWS::EMRContainers::VirtualCluster
uses
AWS::IAM::Role
uses
AWS::EC2::SecurityGroup
uses
AWS::EC2::Subnet
AWS::EMRContainers::VirtualCluster
AWS topology
Dynatrace calls AWS API emrcontainers/ ListVirtualClusters to list resources and calls emrcontainers/ DescribeVirtualCluster to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: emr-containers:DescribeVirtualCluster.
Relationships
Edge type
Destination node
uses
AWS::EKS::Cluster
EMRServerless
AWS::EMRServerless::Application
AWS topology
Dynatrace calls AWS API emrserverless/ ListApplications to list resources and calls emrserverless/ GetApplication to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: emr-serverless:GetApplication.
Dynatrace calls AWS API elasticache/ DescribeCacheClusters to get resource details.
Relationships
Edge type
Destination node
uses
AWS::Elasticache::ParameterGroup
uses
AWS::Elasticache::SubnetGroup
uses
AWS::EC2::SecurityGroup
AWS metrics
Amazon CloudWatch namespace AWS/ElastiCache
Auto-discovery
Dimensions
CacheClusterId
CacheClusterId, CacheNodeId
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS logs
Logs from /aws/elasticache.* Log Group link with the Dynatrace entity for AWS::ElastiCache::CacheCluster.
AWS::ElastiCache::GlobalReplicationGroup
AWS metrics
Amazon CloudWatch namespace AWS/ElastiCache
Auto-discovery
Dimensions
GlobalReplicationGroupId
Recommended metrics
AWS::ElastiCache::ParameterGroup
AWS topology
Dynatrace calls AWS API elasticache/ DescribeCacheParameterGroups to get resource details.
AWS::ElastiCache::ReplicationGroup
AWS metrics
Amazon CloudWatch namespace AWS/ElastiCache
Auto-discovery
Dimensions
ReplicationGroupId
ReplicationGroupId, NodeGroupId
ReplicationGroupId, Role
Recommended metrics
AWS::ElastiCache::ServerlessCache
AWS topology
Dynatrace calls AWS API elasticache/ DescribeServerlessCaches to get resource details.
Relationships
Edge type
Destination node
uses
AWS::EC2::SecurityGroup
is_attached_to
AWS::EC2::Subnet
uses
AWS::KMS::Key
AWS metrics
Amazon CloudWatch namespace AWS/ElastiCache
Auto-discovery
Dimensions
clusterId
Recommended metrics
AWS::ElastiCache::SubnetGroup
AWS topology
Dynatrace calls AWS API elasticache/ DescribeCacheSubnetGroups to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
ElasticBeanstalk
AWS::ElasticBeanstalk::Application
AWS topology
Dynatrace calls AWS API elasticbeanstalk/ DescribeApplications to get resource details.
This requires Dynatrace to have the following IAM action permissions: elasticbeanstalk:DescribeApplications.
AWS::ElasticBeanstalk::Environment
AWS topology
Dynatrace calls AWS API elasticbeanstalk/ DescribeEnvironments to get resource details.
This requires Dynatrace to have the following IAM action permissions: elasticbeanstalk:DescribeEnvironments.
Relationships
Edge type
Destination node
is_part_of
AWS::ElasticBeanstalk::Application
uses
AWS::EC2::LaunchTemplate
uses
AWS::SQS::Queue
AWS metrics
Amazon CloudWatch namespace AWS/ElasticBeanstalk
Auto-discovery
Dimensions
EnvironmentName
EnvironmentName, InstanceId
Recommended metrics
ElasticLoadBalancing
AWS::ElasticLoadBalancing::LoadBalancer
AWS topology
Dynatrace calls AWS API elasticloadbalancing/ DescribeLoadBalancers to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
balances
AWS::EC2::Instance
uses
AWS::EC2::SecurityGroup
uses
AWS::IAM::ServerCertificate
uses
AWS::CertificateManager::Certificate
AWS metrics
Amazon CloudWatch namespace AWS/ELB
Auto-discovery
Dimensions
LoadBalancerName
AvailabilityZone, LoadBalancerName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
ElasticLoadBalancingV2
AWS::ElasticLoadBalancingV2::Listener
AWS topology
Dynatrace calls AWS API elasticloadbalancingv2/ DescribeLoadBalancers to list resources and calls elasticloadbalancingv2/ DescribeListeners to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::ElasticLoadBalancingV2::LoadBalancer
is_attached_to
AWS::ElasticLoadBalancingV2::TargetGroup
is_attached_to
AWS::ElasticLoadBalancingV2::TargetGroup
uses
AWS::IAM::ServerCertificate
uses
AWS::CertificateManager::Certificate
AWS::ElasticLoadBalancingV2::LoadBalancer
AWS topology
Dynatrace calls AWS API elasticloadbalancingv2/ DescribeLoadBalancers to get resource details.
Relationships
Edge type
Destination node
uses
AWS::EC2::SecurityGroup
is_attached_to
AWS::EC2::Subnet
is_attached_to
AWS::EC2::VPC
AWS metrics
Amazon CloudWatch namespace AWS/NetworkELB
Auto-discovery
Dimensions
LoadBalancer
AvailabilityZone, LoadBalancer
LoadBalancer, TargetGroup
AvailabilityZone, LoadBalancer, TargetGroup
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
Amazon CloudWatch Namespace AWS/ApplicationELB
Auto-discovery
Dimensions
LoadBalancer
AvailabilityZone, LoadBalancer
LoadBalancer, TargetGroup
AvailabilityZone, LoadBalancer, TargetGroup
Recommended Metrics
Automatically enabled as recommended Service when you onboard via Quick Start.
AWS::ElasticLoadBalancingV2::TargetGroup
AWS topology
Dynatrace calls AWS API elasticloadbalancingv2/ DescribeTargetGroups to get resource details.
Relationships
Edge type
Destination node
balanced_by
AWS::ElasticLoadBalancingV2::LoadBalancer
balances
AWS::EC2::Instance
balances
AWS::Lambda::Function
AWS metrics
Amazon CloudWatch namespace AWS/NetworkELB
Auto-discovery
Dimensions
TargetGroup
TargetGroup, LoadBalancer
Recommended metrics
Events
AWS::Events::EventBus
AWS topology
Dynatrace calls AWS API eventbridge/ ListEventBuses to list resources and calls eventbridge/ DescribeEventBus to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: events:ListEventBuses, events:DescribeEventBus.
Relationships
Edge type
Destination node
uses
AWS::SQS::Queue
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/Events
Auto-discovery
Dimensions
EventBusName, RuleName
Recommended metrics
AWS::Events::Rule
AWS topology
Dynatrace calls AWS API eventbridge/ ListRules to get resource details.
This requires Dynatrace to have the following IAM action permissions: events:ListRules.
Relationships
Edge type
Destination node
belongs_to
AWS::Events::EventBus
uses
AWS::IAM::Role
FSx
AWS::FSx::FileSystem
AWS topology
Dynatrace calls AWS API fsx/ DescribeFileSystems to get resource details.
This requires Dynatrace to have the following IAM action permissions: fsx:DescribeFileSystems.
Dynatrace calls AWS API fsx/ DescribeStorageVirtualMachines to get resource details.
This requires Dynatrace to have the following IAM action permissions: fsx:DescribeStorageVirtualMachines.
Relationships
Edge type
Destination node
belongs_to
AWS::FSx::FileSystem
AWS::FSx::Volume
AWS topology
Dynatrace calls AWS API fsx/ DescribeVolumes to get resource details.
This requires Dynatrace to have the following IAM action permissions: fsx:DescribeVolumes.
Relationships
Edge type
Destination node
belongs_to
AWS::FSx::FileSystem
GlobalAccelerator
AWS::GlobalAccelerator::Accelerator
AWS topology
Dynatrace calls AWS API globalaccelerator/ ListAccelerators to get resource details.
This requires Dynatrace to have the following IAM action permissions: globalaccelerator:ListAccelerators.
AWS metrics
Amazon CloudWatch namespace AWS/GlobalAccelerator
Auto-discovery
Dimensions
AcceleratorId
AcceleratorId, Listener
AcceleratorId, Listener, EndpointGroup
Recommended metrics
Glue
AWS::Glue::Job
AWS topology
Dynatrace calls AWS API glue/ GetJobs to get resource details.
This requires Dynatrace to have the following IAM action permissions: glue:GetJobs.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
uses
AWS::EC2::SecurityGroup
AWS metrics
Amazon CloudWatch namespace Glue
Auto-discovery
Dimensions
JobName, JobRunId, Type
Recommended metrics
IAM
AWS::IAM::Group
AWS topology
Relationships
Edge type
Destination node
uses
AWS::IAM::ManagedPolicy
AWS::IAM::InstanceProfile
AWS topology
Dynatrace calls AWS API iam/ ListInstanceProfiles to get resource details.
This requires Dynatrace to have the following IAM action permissions: iam:ListInstanceProfiles.
Relationships
Edge type
Destination node
is_attached_to
AWS::IAM::Role
uses
AWS::IAM::Role
AWS::IAM::ManagedPolicy
AWS topology
AWS::IAM::Role
AWS topology
Relationships
Edge type
Destination node
uses
AWS::IAM::ManagedPolicy
AWS::IAM::ServerCertificate
AWS topology
Dynatrace calls AWS API iam/ ListServerCertificates to get resource details.
This requires Dynatrace to have the following IAM action permissions: iam:ListServerCertificates.
AWS::IAM::User
AWS topology
Relationships
Edge type
Destination node
belongs_to
AWS::IAM::Group
uses
AWS::IAM::ManagedPolicy
KMS
AWS::KMS::Alias
AWS topology
Dynatrace calls AWS API kms/ ListAliases to get resource details.
This requires Dynatrace to have the following IAM action permissions: kms:ListAliases.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
AWS::KMS::Key
AWS topology
Dynatrace calls AWS API kms/ ListKeys to list resources and calls kms/ DescribeKey to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: kms:ListKeys, kms:DescribeKey.
AWS metrics
Amazon CloudWatch namespace AWS/KMS
Auto-discovery
Dimensions
KeyArn
Recommended metrics
KafkaConnect
AWS::KafkaConnect::Connector
AWS topology
Dynatrace calls AWS API kafkaconnect/ ListConnectors to list resources and calls kafkaconnect/ DescribeConnector to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: kafkaconnect:ListConnectors, kafkaconnect:DescribeConnector.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
AWS metrics
Amazon CloudWatch namespace AWS/KafkaConnect
Auto-discovery
Dimensions
ConnectorName
Recommended metrics
AWS logs
Logs from /aws/msk/connector.* Log Group link with the Dynatrace entity for AWS::KafkaConnect::Connector.
Kinesis
AWS::Kinesis::Stream
AWS topology
Dynatrace calls AWS API kinesis/ ListStreams to list resources and calls kinesis/ DescribeStreamSummary to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: kinesis:ListStreams, kinesis:DescribeStreamSummary.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/Kinesis
Auto-discovery
Dimensions
StreamName
Recommended metrics
KinesisAnalyticsV2
AWS::KinesisAnalyticsV2::Application
AWS topology
Dynatrace calls AWS API kinesisanalyticsv2/ ListApplications to list resources and calls kinesisanalyticsv2/ DescribeApplication to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: kinesisanalytics:ListApplications, kinesisanalytics:DescribeApplication.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
AWS metrics
Amazon CloudWatch namespace AWS/KinesisAnalytics
Auto-discovery
Dimensions
ApplicationName
Application, Operator, Task, Parallelism
Recommended metrics
KinesisFirehose
AWS::KinesisFirehose::DeliveryStream
AWS topology
Relationships
Edge type
Destination node
uses
AWS::S3::Bucket
uses
AWS::OpenSearch::Domain
uses
AWS::OpenSearchServerless::Collection
uses
AWS::Redshift::Cluster
AWS metrics
Amazon CloudWatch namespace AWS/Firehose
Auto-discovery
Dimensions
DeliveryStreamName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
Lambda
AWS::Lambda::Alias
AWS topology
Dynatrace calls AWS API lambda/ ListFunctions to list resources and calls lambda/ ListAliases to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::Lambda::Function
AWS::Lambda::EventSourceMapping
AWS topology
Dynatrace calls AWS API lambda/ ListEventSourceMappings to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::Lambda::Function
uses
AWS::SQS::Queue
uses
AWS::DynamoDB::Table
AWS::Lambda::Function
AWS topology
Dynatrace calls AWS API lambda/ ListFunctions to list resources and calls lambda/ GetFunction to get details for each resource.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
uses
AWS::EC2::SecurityGroup
is_attached_to
AWS::EC2::Subnet
is_attached_to
AWS::EC2::VPC
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/Lambda
Auto-discovery
Dimensions
FunctionName
FunctionName, Resource
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS logs
Logs from /aws/lambda/(?<FunctionName>[a-zA-Z0-9_-]+) Log Group link with the Dynatrace entity for AWS::Lambda::Function.
Logs
AWS::Logs::DeliveryDestination
AWS topology
Dynatrace calls AWS API cloudwatchlogs/ DescribeDeliveryDestinations to get resource details.
This requires Dynatrace to have the following IAM action permissions: logs:DescribeDeliveryDestinations.
Relationships
Edge type
Destination node
uses
AWS::S3::Bucket
uses
AWS::Logs::LogGroup
uses
AWS::KinesisFirehose::DeliveryStream
AWS::Logs::LogGroup
AWS topology
Dynatrace calls AWS API cloudwatchlogs/ DescribeLogGroups to get resource details.
This requires Dynatrace to have the following IAM action permissions: logs:DescribeLogGroups.
Dynatrace calls AWS API kafka/ ListClustersV2 to get resource details.
This requires Dynatrace to have the following IAM action permissions: kafka:ListClustersV2.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::Subnet
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
uses
AWS::EC2::SecurityGroup
runs_on
AWS::Availability_Zone
uses
AWS::KMS::Key
uses
AWS::MSK::Configuration
uses
AWS::S3::Bucket
uses
AWS::KinesisFirehose::DeliveryStream
uses
AWS::Logs::LogGroup
uses
AWS::ACMPCA::CertificateAuthority
AWS metrics
Amazon CloudWatch namespace AWS/Kafka
Auto-discovery
Dimensions
Cluster Name
Cluster Name, Broker ID
Cluster Name, Client Authentication
Cluster Name, Broker ID, Topic
Cluster Name, Broker ID, Client Authentication
Cluster Name, Consumer Group, Topic
Recommended metrics
AWS logs
Logs from /aws/msk/broker.* Log Group link with the Dynatrace entity for AWS::MSK::Cluster.
AWS::MSK::Configuration
AWS topology
Dynatrace calls AWS API kafka/ ListConfigurations to get resource details.
This requires Dynatrace to have the following IAM action permissions: kafka:ListConfigurations.
AWS::MSK::VpcConnection
AWS topology
Dynatrace calls AWS API kafka/ ListVpcConnections to list resources and calls kafka/ DescribeVpcConnection to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: kafka:ListVpcConnections, kafka:DescribeVpcConnection.
Relationships
Edge type
Destination node
is_attached_to
AWS::MSK::Cluster
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
MWAA
AWS::MWAA::Environment
AWS topology
Dynatrace calls AWS API mwaa/ ListEnvironments to list resources and calls mwaa/ GetEnvironment to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: airflow:ListEnvironments, airflow:GetEnvironment.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
uses
AWS::S3::Bucket
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace Amazon/MWAA
Auto-discovery
Dimensions
Environment, AirflowComponent, Function
Recommended metrics
Neptune
AWS::Neptune::DBCluster
AWS metrics
Amazon CloudWatch namespace AWS/Neptune
Auto-discovery
Dimensions
DBClusterIdentifier
DBClusterIdentifier, Role
Recommended metrics
AWS::Neptune::DBInstance
AWS metrics
Amazon CloudWatch namespace AWS/Neptune
Auto-discovery
Dimensions
DBInstanceIdentifier
Recommended metrics
NetworkFirewall
AWS::NetworkFirewall::Firewall
AWS topology
Dynatrace calls AWS API networkfirewall/ ListFirewalls to list resources and calls networkfirewall/ DescribeFirewall to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: network-firewall:ListFirewalls, network-firewall:DescribeFirewall.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
uses
AWS::NetworkFirewall::FirewallPolicy
AWS metrics
Amazon CloudWatch namespace AWS/NetworkFirewall
Auto-discovery
Dimensions
Firewallname
Recommended metrics
AWS::NetworkFirewall::FirewallPolicy
AWS topology
Dynatrace calls AWS API networkfirewall/ ListFirewallPolicies to list resources and calls networkfirewall/ DescribeFirewallPolicy to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: network-firewall:ListFirewallPolicies, network-firewall:DescribeFirewallPolicy.
AWS metrics
Amazon CloudWatch namespace AWS/NetworkFirewall
Auto-discovery
Dimensions
Firewallpolicyname
Recommended metrics
OpenSearch
AWS::OpenSearch::Domain
AWS topology
Dynatrace calls AWS API opensearch/ ListDomainNames to list resources and calls opensearch/ DescribeDomains to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
uses
AWS::EC2::SecurityGroup
is_attached_to
AWS::EC2::Subnet
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/ES
Auto-discovery
Dimensions
DomainName, ClientId
DomainName, ClientId, NodeId
DomainName, ClientId, NodeId, ShardRole
Recommended metrics
OpenSearchServerless
AWS::OpenSearchServerless::Collection
AWS topology
Dynatrace calls AWS API opensearchserverless/ ListCollections to list resources and calls opensearchserverless/ BatchGetCollection to get details for each resource.
Logs from /aws/opensearch/domains/(?<DomainName>[a-zA-Z0-9_-]+)/.* Log Group link with the Dynatrace entity for AWS::OpenSearchService::Domain.
RDS
AWS::RDS::DBCluster
AWS topology
Dynatrace calls AWS API rds/ DescribeDbClusters to get resource details.
Relationships
Edge type
Destination node
uses
AWS::EC2::SecurityGroup
uses
AWS::RDS::DBSubnetGroup
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/RDS
Auto-discovery
Dimensions
DBClusterIdentifier
DBClusterIdentifier, EngineName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS::RDS::DBClusterSnapshot
AWS topology
Dynatrace calls AWS API rds/ DescribeDbClusterSnapshots to get resource details.
This requires Dynatrace to have the following IAM action permissions: rds:DescribeDBClusterSnapshots.
Relationships
Edge type
Destination node
is_part_of
AWS::RDS::DBCluster
is_attached_to
AWS::EC2::VPC
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS::RDS::DBInstance
AWS topology
Dynatrace calls AWS API rds/ DescribeDbInstances to get resource details.
Relationships
Edge type
Destination node
uses
AWS::EC2::SecurityGroup
uses
AWS::RDS::DBSubnetGroup
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
uses
AWS::RDS::OptionGroup
is_part_of
AWS::RDS::DBCluster
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/RDS
Auto-discovery
Dimensions
DBInstanceIdentifier
DBInstanceIdentifier, EngineName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS logs
Logs from /aws/rds/cluster/[a-zA-Z0-9_-]+/(?<LogType>.*) Log Group link with the Dynatrace entity for AWS::RDS::DBInstance.
RDS::DBInstance`.
AWS::RDS::DBSnapshot
AWS topology
Dynatrace calls AWS API rds/ DescribeDbSnapshots to get resource details.
This requires Dynatrace to have the following IAM action permissions: rds:DescribeDBSnapshots.
Relationships
Edge type
Destination node
is_part_of
AWS::RDS::DBInstance
is_attached_to
AWS::EC2::VPC
uses
AWS::RDS::OptionGroup
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS::RDS::DBSubnetGroup
AWS topology
Dynatrace calls AWS API rds/ DescribeDbSubnetGroups to get resource details.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
AWS::RDS::OptionGroup
AWS topology
Dynatrace calls AWS API rds/ DescribeOptionGroups to get resource details.
Redshift
AWS::Redshift::Cluster
AWS topology
Dynatrace calls AWS API redshift/ DescribeClusters to get resource details.
This requires Dynatrace to have the following IAM action permissions: redshift:DescribeClusters.
Relationships
Edge type
Destination node
uses
AWS::Redshift::SubnetGroup
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
uses
AWS::KMS::Key
uses
AWS::KMS::Key
AWS metrics
Amazon CloudWatch namespace AWS/Redshift
Auto-discovery
Dimensions
ClusterIdentifier
ClusterIdentifier, NodeID
Recommended metrics
AWS::Redshift::SubnetGroup
AWS topology
Dynatrace calls AWS API redshift/ DescribeClusterSubnetGroups to get resource details.
This requires Dynatrace to have the following IAM action permissions: redshift:DescribeClusterSubnetGroups.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
RedshiftServerless
AWS::RedshiftServerless::Namespace
AWS topology
Dynatrace calls AWS API redshiftserverless/ ListNamespaces to get resource details.
This requires Dynatrace to have the following IAM action permissions: redshift-serverless:ListNamespaces.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Key
AWS::RedshiftServerless::Workgroup
AWS topology
Dynatrace calls AWS API redshiftserverless/ ListWorkgroups to get resource details.
This requires Dynatrace to have the following IAM action permissions: redshift-serverless:ListWorkgroups.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
is_attached_to
AWS::EC2::Subnet
uses
AWS::EC2::SecurityGroup
Route53
AWS::Route53::HealthCheck
AWS topology
Dynatrace calls AWS API route53/ ListHealthChecks to get resource details.
Relationships
Edge type
Destination node
uses
AWS::Route53::HealthCheck
AWS metrics
Amazon CloudWatch namespace AWS/Route53
Auto-discovery
Dimensions
HealthCheckId
HealthCheckId, Region
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS::Route53::HostedZone
AWS topology
Dynatrace calls AWS API route53/ ListHostedZones to list resources and calls route53/ GetHostedZone to get details for each resource.
Relationships
Edge type
Destination node
is_attached_to
AWS::EC2::VPC
AWS metrics
Amazon CloudWatch namespace AWS/Route53
Auto-discovery
Dimensions
HostedZoneId
Recommended metrics
AWS logs
Logs from /aws/route53/.* Log Group link with the Dynatrace entity for AWS::Route53::HostedZone.
Route53Resolver
AWS::Route53Resolver::ResolverEndpoint
AWS topology
Dynatrace calls AWS API route53resolver/ ListResolverEndpoints to get resource details.
This requires Dynatrace to have the following IAM action permissions: route53resolver:ListResolverEndpoints.
S3
AWS::S3::Bucket
AWS topology
Dynatrace calls AWS API s3/ ListBuckets to get resource details.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/S3
Auto-discovery
Dimensions
BucketName, FilterId
BucketName, FilterId, StorageType
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
SNS
AWS::SNS::Topic
AWS topology
Dynatrace calls AWS API sns/ ListTopics to list resources and calls sns/ GetTopicAttributes to get details for each resource.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/SNS
Auto-discovery
Dimensions
TopicName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
AWS logs
Logs from sns/(?<TopicRegion>[a-z0-9-]+)/(?<TopicAccount>[0-9]+)/(?<TopicName>[a-zA-Z0-9_-]+)(/.*)? Log Group link with the Dynatrace entity for AWS::SNS::Topic.
SQS
AWS::SQS::Queue
AWS topology
Dynatrace calls AWS API sqs/ ListQueues to list resources and calls sqs/ GetQueueAttributes to get details for each resource.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/SQS
Auto-discovery
Dimensions
QueueName
Recommended metrics
Automatically enabled as a recommended service when you onboard via Quick Start.
SageMaker
AWS::SageMaker::Endpoint
AWS topology
Dynatrace calls AWS API sagemaker/ ListEndpoints to list resources and calls sagemaker/ DescribeEndpoint to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: sagemaker:ListEndpoints, sagemaker:DescribeEndpoint.
Relationships
Edge type
Destination node
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/SageMaker
Auto-discovery
Dimensions
EndpointName, VariantName
Recommended metrics
AWS::SageMaker::FeatureGroup
AWS topology
Dynatrace calls AWS API sagemaker/ ListFeatureGroups to list resources and calls sagemaker/ DescribeFeatureGroup to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: sagemaker:ListFeatureGroups, sagemaker:DescribeFeatureGroup.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS::SageMaker::InferenceComponent
AWS topology
Dynatrace calls AWS API sagemaker/ ListInferenceComponents to list resources and calls sagemaker/ DescribeInferenceComponent to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: sagemaker:ListInferenceComponents, sagemaker:DescribeInferenceComponent.
Dynatrace calls AWS API sagemaker/ ListLabelingJobs to list resources and calls sagemaker/ DescribeLabelingJob to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: sagemaker:ListLabelingJobs, sagemaker:DescribeLabelingJob.
Relationships
Edge type
Destination node
uses
AWS::IAM::Role
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS::SageMaker::Pipeline
AWS topology
Dynatrace calls AWS API sagemaker/ ListPipelines to list resources and calls sagemaker/ DescribePipeline to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: sagemaker:ListPipelines, sagemaker:DescribePipeline.
Dynatrace calls AWS API sfn/ ListStateMachines to list resources and calls sfn/ DescribeStateMachine to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: states:ListStateMachines, states:DescribeStateMachine.
Relationships
Edge type
Destination node
uses
AWS::Logs::LogGroup
uses
AWS::KMS::Key
uses
AWS::KMS::Alias
AWS metrics
Amazon CloudWatch namespace AWS/States
Auto-discovery
Dimensions
StateMachineArn
StateMachineArn, Version
StateMachineArn, Alias
Recommended metrics
StorageGateway
AWS::StorageGateway::Gateway
AWS topology
Dynatrace calls AWS API storagegateway/ ListGateways to list resources and calls storagegateway/ DescribeGatewayInformation to get details for each resource.
This requires Dynatrace to have the following IAM action permissions: storagegateway:ListGateways, storagegateway:DescribeGatewayInformation.