Configuring Multi-Account Aggregation for Unified Monitoring

Prerequisites

• You have enabled trusted access to AOM on the Organizations console.
• Cloud service metrics have been connected for multiple accounts in an organization.

Constraints

• Only the organization administrator or delegated administrator can create Prometheus instances for multi-account aggregation and connect accounts.
• If a delegated administrator cannot connect accounts, assign the following permissions to the delegated administrator :
  • organizations:trustedServices:list
  • organizations:organizations:get
  • organizations:delegatedAdministrators:list
  • organizations:roots:list
  • organizations:delegatedServices:list
• AOM only supports connection to member accounts under an organizational unit (OU). When the relationship between the OU and member accounts changes, AOM will not automatically synchronize that information.

Creating a Prometheus Instance for Multi-Account Aggregation

1. Log in to the AOM 2.0 console.
2. In the navigation pane on the left, choose Prometheus Monitoring > Instances. On the displayed page, click Add Prometheus Instance.
3. Set an instance name, enterprise project, and instance type.

   Table 1 Parameters for creating a Prometheus instance

   Parameter	Description
   Instance Name	Prometheus instance name. Enter a maximum of 100 characters and do not start or end with an underscore (_) or hyphen (-). Only letters, digits, underscores, and hyphens are allowed.
   Enterprise Project	Enterprise project. If you have selected All for Enterprise Project on the global settings page, select one from the drop-down list here. If you have already selected an enterprise project on the global settings page, this option will be dimmed and cannot be changed. To use the enterprise project function, contact engineers.
   Instance Type	Type of the Prometheus instance. Select Prometheus for Multi-Account Aggregation.

4. Click OK.

Connecting Accounts

1. Log in to the AOM 2.0 console.
2. On the Prometheus instance list page, click a Prometheus instance for multi-account aggregation.
3. On the Account Access page, manage member accounts, connect cloud services, configure data storage, and add supported metrics.
   • Managing member accounts: AOM supports account management. It allows you to incorporate cloud accounts into your organization for centralized management. There are three types of members in an organization: administrator, delegated administrator, and common user. Common users do not have the permission to monitor multi-account metrics on AOM.
     • To monitor the metrics of a member account, click the Member Account text box and enter an account keyword in the displayed search box. Related member accounts are automatically displayed. Then select your desired ones.
     • To stop monitoring the metrics of a member account, delete the account from the Member Account text box on the Account Access page.
   • Connecting cloud services: Select one or more cloud services from the drop-down list.
   • Data storage: Member accounts retain metric data after they are connected to a Prometheus instance for aggregation. By default, this function is disabled.
   • Adding metrics supported by cloud services: Click Add Metric to add metrics for connected cloud services.