CloudWatch

8 resource kinds. Generated from the operator's CRD schemas.

API Group: aws.konfig.io/v1alpha1

CloudWatchAlarm # GA

CloudWatchAlarm is the Schema for managing CloudWatch metric alarms.

kubectl get cloudwatchalarms · example on GitHub

Example

# CloudWatchAlarm — CloudWatch
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudwatch.html#cloudwatchalarm
apiVersion: aws.konfig.io/v1alpha1
kind: CloudWatchAlarm
metadata:
  name: example-cloudwatchalarm
  namespace: default
spec:
  actionsEnabled: true
  alarmActions:
  - example
  alarmDescription: Managed by konfig-konector
  alarmName: example-cloudwatchalarm
  comparisonOperator: GreaterThanOrEqualToThreshold
  datapointsToAlarm: 1
  dimensions:
  - name: example-cloudwatchalarm
    value: example
  evaluationPeriods: 1
  insufficientDataActions:
  - example
  metricName: example-cloudwatchalarm
  namespace: example
  okActions:
  - example
  period: 1
  providerRef:
    name: example-cloudwatchalarm
    region: us-east-1
  statistic: SampleCount
  tags:
    environment: dev
    team: platform
  threshold: 1
  treatMissingData: breaching
  unit: example

Spec

Field	Type	Required	Description
`actionsEnabled`	boolean	—	ActionsEnabled indicates whether actions should be executed during alarm state changes.
`alarmActions`	array<string>	—	AlarmActions are ARNs of actions to execute when the alarm transitions to ALARM state.
`alarmDescription`	string	—	AlarmDescription is a description for the alarm.
`alarmName`	string	yes	AlarmName is the name of the alarm.
`comparisonOperator`	enum	yes	ComparisonOperator is the arithmetic operation to use when comparing the statistic and threshold. Allowed: `GreaterThanOrEqualToThreshold, GreaterThanThreshold, LessThanThreshold, LessThanOrEqualToThreshold, LessThanLowerOrGreaterThanUpperThreshold, LessThanLowerThreshold, GreaterThanUpperThreshold`
`datapointsToAlarm`	integer	—	DatapointsToAlarm is the number of data points that must be breaching to trigger the alarm.
`dimensions`	array<object>	—	Dimensions are the dimensions for the metric.
`dimensions[].name`	string	yes	Name is the dimension name.
`dimensions[].value`	string	yes	Value is the dimension value.
`evaluationPeriods`	integer	yes	EvaluationPeriods is the number of periods over which data is compared to the threshold.
`insufficientDataActions`	array<string>	—	InsufficientDataActions are ARNs of actions to execute when the alarm has insufficient data.
`metricName`	string	—	MetricName is the name of the metric.
`namespace`	string	—	Namespace is the namespace of the metric.
`okActions`	array<string>	—	OKActions are ARNs of actions to execute when the alarm transitions to OK state.
`period`	integer	—	Period is the period in seconds over which the statistic is applied.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`statistic`	enum	—	Statistic is the statistic for the metric. Allowed: `SampleCount, Average, Sum, Minimum, Maximum`
`tags`	map<string>	—	Tags are metadata tags for the alarm.
`threshold`	number	—	Threshold is the value to compare with the specified statistic.
`treatMissingData`	enum	—	TreatMissingData sets how to handle missing data points. Allowed: `breaching, notBreaching, ignore, missing`
`unit`	string	—	Unit is the unit of the metric.

Status

Field	Type	Required	Description
`alarmArn`	string	—	AlarmARN is the ARN of the alarm.
`alarmState`	string	—	AlarmState is the current state of the alarm.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

CloudWatchAlarmMuteRule # CLOUD CONTROL · AWS::CloudWatch::AlarmMuteRule

CloudWatchAlarmMuteRule manages AWS::CloudWatch::AlarmMuteRule through the AWS Cloud Control API.

kubectl get cloudwatchalarmmuterules · example on GitHub

Example

# CloudWatchAlarmMuteRule — CloudWatch
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudwatch.html#cloudwatchalarmmuterule
apiVersion: aws.konfig.io/v1alpha1
kind: CloudWatchAlarmMuteRule
metadata:
  name: example-cloudwatchalarmmuterule
  namespace: default
spec:
  description: Managed by konfig-konector
  expireDate: example
  muteTargets:
    alarmNames:
    - example
  name: example-cloudwatchalarmmuterule
  providerRef:
    name: example-cloudwatchalarmmuterule
    region: us-east-1
  rule:
    schedule:
      duration: example
      expression: example
      timezone: example
  startDate: example
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`description`	string	—	The description of the AlarmMuteRule
`expireDate`	string	—	The date, with the same timezone offset as "ScheduleTimezone" after which the alarm mute rule will be expired.
`muteTargets`	object	—	Targets to be muted
`muteTargets.alarmNames`	array<string>	yes	The alarm names to be mute by the AlarmMuteRule
`name`	string	—	The name of the AlarmMuteRule Create-only in AWS: changing it requires replacing the resource.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`rule`	object	yes	The rule for the mute
`rule.schedule`	object	yes	Schedule for the mute to be active
`rule.schedule.duration`	string	yes	The duration of the schedule when it triggers
`rule.schedule.expression`	string	yes	The expression of the schedule
`rule.schedule.timezone`	string	—	The timezone of the schedule
`startDate`	string	—	The date, with the same timezone offset as "ScheduleTimezone", after which the alarm mute rule will become active.
`tags`	array<object>	—	An array of key-value pairs to apply to this resource.
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Amazon Resource Name (ARN) of the AlarmMuteRule Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`lastUpdatedTimestamp`	string	—	The last update timestamp of the alarm mute schedule Read-only: reported by AWS after creation.
`muteType`	string	—	The mute type of the alarm mute Read-only: reported by AWS after creation.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`status`	enum	—	The current status of the AlarmMuteRule Read-only: reported by AWS after creation. Allowed: `SCHEDULED, ACTIVE, EXPIRED`

CloudWatchDashboard # GA

CloudWatchDashboard is the Schema for managing CloudWatch dashboards.

kubectl get cloudwatchdashboards · example on GitHub

Example

# CloudWatchDashboard — CloudWatch
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudwatch.html#cloudwatchdashboard
apiVersion: aws.konfig.io/v1alpha1
kind: CloudWatchDashboard
metadata:
  name: example-cloudwatchdashboard
  namespace: default
spec:
  dashboardBody: example
  dashboardName: example-cloudwatchdashboard
  providerRef:
    name: example-cloudwatchdashboard
    region: us-east-1

Spec

Field	Type	Required	Description
`dashboardBody`	string	yes	DashboardBody is the JSON body of the dashboard configuration.
`dashboardName`	string	yes	DashboardName is the name of the dashboard.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`dashboardArn`	string	—	DashboardARN is the ARN of the dashboard.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.

CloudWatchInsightRule # CLOUD CONTROL · AWS::CloudWatch::InsightRule

CloudWatchInsightRule manages AWS::CloudWatch::InsightRule through the AWS Cloud Control API.

kubectl get cloudwatchinsightrules · example on GitHub

Example

# CloudWatchInsightRule — CloudWatch
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudwatch.html#cloudwatchinsightrule
apiVersion: aws.konfig.io/v1alpha1
kind: CloudWatchInsightRule
metadata:
  name: example-cloudwatchinsightrule
  namespace: default
spec:
  applyOnTransformedLogs: false
  providerRef:
    name: example-cloudwatchinsightrule
    region: us-east-1
  ruleBody: example
  ruleName: example-cloudwatchinsightrule
  ruleState: ENABLED
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`applyOnTransformedLogs`	boolean	—
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`ruleBody`	string	yes
`ruleName`	string	yes	Create-only in AWS: changing it requires replacing the resource.
`ruleState`	enum	yes	Allowed: `ENABLED, DISABLED`
`tags`	array<object>	—
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Read-only: reported by AWS after creation.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

CloudWatchLogAlarm # CLOUD CONTROL · AWS::CloudWatch::LogAlarm

CloudWatchLogAlarm manages AWS::CloudWatch::LogAlarm through the AWS Cloud Control API.

kubectl get cloudwatchlogalarms · example on GitHub

Example

# CloudWatchLogAlarm — CloudWatch
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudwatch.html#cloudwatchlogalarm
apiVersion: aws.konfig.io/v1alpha1
kind: CloudWatchLogAlarm
metadata:
  name: example-cloudwatchlogalarm
  namespace: default
spec:
  actionLogLineCount: 1
  actionLogLineRoleArn: arn:aws:iam::123456789012:role/example-role
  actionsEnabled: true
  alarmActions:
  - example
  alarmDescription: Managed by konfig-konector
  alarmName: example-cloudwatchlogalarm
  comparisonOperator: example
  insufficientDataActions:
  - example
  okActions:
  - example
  providerRef:
    name: example-cloudwatchlogalarm
    region: us-east-1
  queryResultsToAlarm: 1
  queryResultsToEvaluate: 1
  scheduledQueryConfiguration:
    aggregationExpression: example
    logGroupIdentifiers:
    - example
    queryString: example
    scheduleConfiguration:
      endTimeOffset: 1
      scheduleExpression: example
      startTimeOffset: 1
    scheduledQueryRoleARN: arn:aws:iam::123456789012:role/example-role
    tags:
    - key: example
      value: example
  tags:
  - key: example
    value: example
  threshold: 1
  treatMissingData: example
  warmUpConfiguration:
    onlyStartEvaluatingAfterWarmUpPeriodEnds: false
    warmUpPeriodDurationInMinutes: 1

Spec

Field	Type	Required	Description
`actionLogLineCount`	integer	—	The number of log lines to include in alarm notifications.
`actionLogLineRoleArn`	string	—	The ARN of the IAM role that grants CloudWatch permissions to fetch log lines for alarm notifications.
`actionsEnabled`	boolean	—	Indicates whether actions should be executed during any changes to the alarm state.
`alarmActions`	array<string>	—	The list of actions to execute when this alarm transitions into an ALARM state from any other state.
`alarmDescription`	string	—	The description of the log alarm.
`alarmName`	string	—	The name of the log alarm.
`comparisonOperator`	string	yes	The arithmetic operation to use when comparing the specified threshold and the query results.
`insufficientDataActions`	array<string>	—	The actions to execute when this alarm transitions to the INSUFFICIENT_DATA state from any other state.
`okActions`	array<string>	—	The actions to execute when this alarm transitions to the OK state from any other state.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`queryResultsToAlarm`	integer	yes	The number of query results that must be breaching to trigger the alarm.
`queryResultsToEvaluate`	integer	yes	The number of query results over which data is compared to the specified threshold.
`scheduledQueryConfiguration`	object	yes	The scheduled query configuration for the log alarm.
`scheduledQueryConfiguration.aggregationExpression`	string	yes	The aggregation expression for the scheduled query, e.g.
`scheduledQueryConfiguration.logGroupIdentifiers`	array<string>	—	The log groups to query.
`scheduledQueryConfiguration.queryString`	string	yes	The query string to execute against the specified log groups.
`scheduledQueryConfiguration.scheduleConfiguration`	object	yes	The schedule configuration.
`scheduledQueryConfiguration.scheduleConfiguration.endTimeOffset`	integer	—	The number of seconds into the past to end the query window.
`scheduledQueryConfiguration.scheduleConfiguration.scheduleExpression`	string	yes	The expression that defines when the scheduled query runs, e.g.
`scheduledQueryConfiguration.scheduleConfiguration.startTimeOffset`	integer	yes	The number of seconds into the past to start the query window.
`scheduledQueryConfiguration.scheduledQueryRoleARN`	string	yes	The ARN of the IAM role that grants permissions to execute the scheduled query.
`scheduledQueryConfiguration.tags`	array<object>	—	A list of key-value pairs to associate with the scheduled query that backs the log alarm.
`scheduledQueryConfiguration.tags[].key`	string	yes
`scheduledQueryConfiguration.tags[].value`	string	yes
`tags`	array<object>	—	A list of key-value pairs to associate with the log alarm.
`tags[].key`	string	yes
`tags[].value`	string	yes
`threshold`	number	yes	The value to compare against the results of the scheduled query evaluation.
`treatMissingData`	string	—	Sets how this alarm is to handle missing data points.
`warmUpConfiguration`	object	—	The warm-up configuration for the alarm.
`warmUpConfiguration.onlyStartEvaluatingAfterWarmUpPeriodEnds`	boolean	—	Specifies whether the alarm waits for the full warm-up period before it starts evaluating.
`warmUpConfiguration.warmUpPeriodDurationInMinutes`	integer	—	The length of the warm-up period, in minutes.

Status

Field	Type	Required	Description
`arn`	string	—	The ARN of the log alarm.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.

CloudWatchMetricStream # CLOUD CONTROL · AWS::CloudWatch::MetricStream

CloudWatchMetricStream manages AWS::CloudWatch::MetricStream through the AWS Cloud Control API.

kubectl get cloudwatchmetricstreams · example on GitHub

Example

# CloudWatchMetricStream — CloudWatch
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudwatch.html#cloudwatchmetricstream
apiVersion: aws.konfig.io/v1alpha1
kind: CloudWatchMetricStream
metadata:
  name: example-cloudwatchmetricstream
  namespace: default
spec:
  excludeFilters:
  - metricNames:
    - example
    namespace: example
  firehoseArn: arn:aws:iam::123456789012:role/example-role
  includeFilters:
  - metricNames:
    - example
    namespace: example
  includeLinkedAccountsMetrics: false
  name: example-cloudwatchmetricstream
  outputFormat: example
  providerRef:
    name: example-cloudwatchmetricstream
    region: us-east-1
  roleArn: arn:aws:iam::123456789012:role/example-role
  statisticsConfigurations:
  - additionalStatistics:
    - example
    includeMetrics:
    - metricName: example-cloudwatchmetricstream
      namespace: example
  tags:
  - key: example
    value: example

Spec

Field	Type	Required	Description
`excludeFilters`	array<object>	—	Define which metrics will be not streamed.
`excludeFilters[].metricNames`	array<string>	—	Only metrics with MetricNames matching these values will be streamed.
`excludeFilters[].namespace`	string	yes	Only metrics with Namespace matching this value will be streamed.
`firehoseArn`	string	—	The ARN of the Kinesis Firehose where to stream the data.
`includeFilters`	array<object>	—	Define which metrics will be streamed.
`includeFilters[].metricNames`	array<string>	—	Only metrics with MetricNames matching these values will be streamed.
`includeFilters[].namespace`	string	yes	Only metrics with Namespace matching this value will be streamed.
`includeLinkedAccountsMetrics`	boolean	—	If you are creating a metric stream in a monitoring account, specify true to include metrics from source accounts that are linked to this monitoring account, in the metric stream.
`name`	string	—	Name of the metric stream.
`outputFormat`	string	—	The output format of the data streamed to the Kinesis Firehose.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`roleArn`	string	—	The ARN of the role that provides access to the Kinesis Firehose.
`statisticsConfigurations`	array<object>	—	By default, a metric stream always sends the MAX, MIN, SUM, and SAMPLECOUNT statistics for each metric that is streamed.
`statisticsConfigurations[].additionalStatistics`	array<string>	yes	The additional statistics to stream for the metrics listed in IncludeMetrics.
`statisticsConfigurations[].includeMetrics`	array<object>	yes	An array that defines the metrics that are to have additional statistics streamed.
`statisticsConfigurations[].includeMetrics[].metricName`	string	yes	The name of the metric.
`statisticsConfigurations[].includeMetrics[].namespace`	string	yes	The namespace of the metric.
`tags`	array<object>	—	A set of tags to assign to the delivery stream.
`tags[].key`	string	yes
`tags[].value`	string	yes

Status

Field	Type	Required	Description
`arn`	string	—	Amazon Resource Name of the metric stream.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`creationDate`	object	—	The date of creation of the metric stream.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`lastUpdateDate`	object	—	The date of the last update of the metric stream.
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`state`	string	—	Displays the state of the Metric Stream.

CloudWatchOTelEnrichment # CLOUD CONTROL · AWS::CloudWatch::OTelEnrichment

CloudWatchOTelEnrichment manages AWS::CloudWatch::OTelEnrichment through the AWS Cloud Control API.

kubectl get cloudwatchotelenrichments · example on GitHub

Example

# CloudWatchOTelEnrichment — CloudWatch
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudwatch.html#cloudwatchotelenrichment
apiVersion: aws.konfig.io/v1alpha1
kind: CloudWatchOTelEnrichment
metadata:
  name: example-cloudwatchotelenrichment
  namespace: default
spec:
  providerRef:
    name: example-cloudwatchotelenrichment
    region: us-east-1

Spec

Field	Type	Required	Description
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.

Status

Field	Type	Required	Description
`accountId`	string	—	The AWS account ID.
`attempt`	integer	—	Attempt counts failed create/delete requests; it salts the Cloud Control idempotency token so a retry is not served the cached failure.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`identifier`	string	—	Identifier is the Cloud Control primary identifier of the resource.
`lastSyncTime`	string	—
`observedGeneration`	integer	—
`operation`	string	—	Operation is the in-flight operation (CREATE, UPDATE, DELETE).
`operationStatus`	string	—	OperationStatus is the last reported operation status.
`requestToken`	string	—	RequestToken tracks an in-flight asynchronous operation.
`status`	enum	—	Read-only: reported by AWS after creation. Allowed: `RUNNING, STOPPED`

CompositeAlarm # GA

CompositeAlarm is the Schema for managing CloudWatch composite alarms.

kubectl get compositealarms · example on GitHub

Example

# CompositeAlarm — CloudWatch
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cloudwatch.html#compositealarm
apiVersion: aws.konfig.io/v1alpha1
kind: CompositeAlarm
metadata:
  name: example-compositealarm
  namespace: default
spec:
  actionsEnabled: true
  alarmActions:
  - example
  alarmDescription: Managed by konfig-konector
  alarmName: example-compositealarm
  alarmRule: example
  insufficientDataActions:
  - example
  okActions:
  - example
  providerRef:
    name: example-compositealarm
    region: us-east-1
  tags:
    environment: dev
    team: platform

Spec

Field	Type	Required	Description
`actionsEnabled`	boolean	—	ActionsEnabled indicates whether actions should be executed during alarm state changes.
`alarmActions`	array<string>	—	AlarmActions are ARNs of actions to execute when the alarm transitions to ALARM state.
`alarmDescription`	string	—	AlarmDescription is a description for the alarm.
`alarmName`	string	yes	AlarmName is the name of the composite alarm.
`alarmRule`	string	yes	AlarmRule is the expression that specifies which alarms trigger the composite alarm.
`insufficientDataActions`	array<string>	—	InsufficientDataActions are ARNs of actions to execute when the alarm has insufficient data.
`okActions`	array<string>	—	OKActions are ARNs of actions to execute when the alarm transitions to OK state.
`providerRef`	object	—	ProviderRef selects the AWSProvider (account/region) this resource is reconciled against.
`providerRef.name`	string	yes	Name of a cluster-scoped AWSProvider.
`providerRef.region`	string	—	Region overrides the provider's region for this resource only.
`tags`	map<string>	—	Tags are metadata tags for the composite alarm.

Status

Field	Type	Required	Description
`alarmArn`	string	—	AlarmARN is the ARN of the composite alarm.
`alarmState`	string	—	AlarmState is the current state of the alarm.
`awsProvider`	object	—	AWSProvider confirms the account and region this resource was reconciled against.
`awsProvider.accountId`	string	—	AccountID the resource lives in.
`awsProvider.name`	string	—	Name of the AWSProvider used; empty when the operator's own credentials were used.
`awsProvider.region`	string	—	Region the resource lives in (empty for global services).
`conditions`	array<object>	—	Conditions describe the current state of the resource.
`conditions[].lastTransitionTime`	string	yes	lastTransitionTime is the last time the condition transitioned from one status to another.
`conditions[].message`	string	yes	message is a human readable message indicating details about the transition.
`conditions[].observedGeneration`	integer	—	observedGeneration represents the .metadata.generation that the condition was set based upon.
`conditions[].reason`	string	yes	reason contains a programmatic identifier indicating the reason for the condition's last transition.
`conditions[].status`	enum	yes	status of the condition, one of True, False, Unknown. Allowed: `True, False, Unknown`
`conditions[].type`	string	yes	type of condition in CamelCase or in foo.example.com/CamelCase.
`lastSyncTime`	string	—	LastSyncTime is when the resource was last successfully reconciled.
`observedGeneration`	integer	—	ObservedGeneration is the most recent .metadata.generation reconciled.