aws-samples / aws-samples/container-resiliency

EKS event centralization and discoverability only works from management account within AWS Organization

Open
#15 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
13
Forks
5
PR merge metrics
No merged PRs in 30d

Description

The event centralization and discoverability pattern in `observability/eks-event-centralization-discoverability` works only from the management account of an AWS Organization, which is not consistent with best practice. Preferred strategy would be to:

* Deploy solution to a non-management, central tooling account (instead of relying on a management account)
* Using targeted cross-account roles instead of relying on the general purpose `OrganizationAccountAccessRole`
* Using CDK and CloudFormation StackSets to simplify deployment and ensure that new accounts and new EKS clusters within these accounts are discovered and handled correctly

Contributor guide

Open the contributing guide

Research direction

Start in observability/eks-event-centralization-discoverability and trace how deployment currently depends on the management account and OrganizationAccountAccessRole. Define and implement a deployment approach for a non-management tooling account with targeted roles and CDK/CloudFormation StackSets; done means new accounts and EKS clusters are discovered and handled correctly.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud, infrastructure, observability-sre
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.