Architecture

Overview

ScaleOps AWS Marketplace Integration is the minimum-privilege sub-integration that allows the ScaleOps agent to tag the Prometheus EBS volume with the AWS Marketplace Private Resource Metering (PRM) identifier.

The integration requires two AWS API actions: ec2:CreateTags, scoped to EBS volume resources only, and iam:SimulatePrincipalPolicy, used to validate the granted permissions.

Permissions

The integration requires the following AWS IAM policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "SimulateIAM",
      "Effect": "Allow",
      "Action": [
        "iam:SimulatePrincipalPolicy"
      ],
      "Resource": "*"
    },
    {
      "Sid": "MarketplaceTagging",
      "Effect": "Allow",
      "Action": [
        "ec2:CreateTags"
      ],
      "Resource": "arn:aws:ec2:*:*:volume/*"
    }
  ]
}