AWS Cloudwatch Centerlized Monitoring

Centralize your cloudwatch metrics, alarms and dashboards

Introduction

Since introduction of Cross-account Cross-region Cloudwatch data sharing, AWS has recently introduced Cross-Account Alarms.

AWS also provides ability to allow Delegated/Authorized access to AWS Organization to member accounts to access account list in tree view.

With the above features, AWS now allows operations teams, DevOps engineers, and service owners to monitor, troubleshoot, and analyze applications running in multiple regions and in many accounts from a central monitoring account.

If an alarm is received an on-call engineer can now login into a central account to view dashboards for multiple accounts to diagnose the issue without login to other accounts to view additional dashboards for multiple application components or dependencies.

Design

The solution design utilizes AWS Organization to get the account list from the master account to view the metrics from the monitored accounts.

Configuration

First create a central monitoring account, you can also use log achieve account created by AWS Landing Zone Solution or AWS Control Tower.