Service Integrations

Overview

CloudWrangler integrates with AWS services to provide infrastructure visibility and analysis. Service integrations are configured per AWS account.

Available Integrations

Resource Discovery

Status: Always Enabled

Resource Discovery is CloudWrangler's core integration that discovers your AWS infrastructure.

What It Does:

• Discovers resources across all enabled AWS regions
• Collects metadata, configuration, and state information
• Identifies cost optimization opportunities
• Maps network topology

Discovery Schedule:

• Automatic: Every 12 hours
• Manual: Click "Discover Resources" anytime

Permissions Required:

• AWS managed ReadOnlyAccess policy

VPC Flow Logs Integration

Status: Optional

VPC Flow Logs integration enables network traffic analysis features.

What It Does:

• Analyzes network traffic patterns
• Identifies top talkers by bandwidth
• Detects rejected connections
• Provides traffic flow visualization
• Enables Flow Logs search

Requirements:

• VPC Flow Logs enabled in your AWS account
• Flow Logs stored in S3 (Parquet format)
• Athena configured for querying

Setup: See VPC Flow Logs Setup Guide for detailed instructions.

Cost Considerations:

• ~$0.50 per GB of flow logs ingested by AWS
• S3 storage costs
• Athena query costs ($5 per TB scanned)
• See VPC Flow Logs documentation for detailed cost analysis

Features Unlocked:

• Infrastructure Diagram with traffic flows
• VPC Flow Logs Search
• Traffic Analysis dashboard

Managing Integrations

Enabling VPC Flow Logs

1. Navigate to Settings → AWS Accounts
2. Select the account
3. Click Service Integrations tab
4. Click Configure on VPC Flow Logs
5. Follow the setup wizard

Disabling VPC Flow Logs

To disable VPC Flow Logs integration:

1. In CloudWrangler: Click Disable on the integration
2. In AWS: Delete the IAM role to revoke access

Disabling the integration stops traffic analysis but doesn't delete your AWS Flow Logs configuration or S3 data.

Verifying Integration Status

Click Verify on the integration card to test connectivity. Status updates within 30 seconds.

Data Retention

Resource Discovery:

• Current state: Indefinitely
• Historical states: 90 days

VPC Flow Logs:

• In S3: You control via lifecycle policies
• In CloudWrangler: 30 days aggregated
• Raw logs: Not stored by CloudWrangler

Troubleshooting

Resource Discovery Not Working

Check IAM role exists and has ReadOnlyAccess policy attached:

aws iam get-role --role-name CloudWranglerAccessRole
aws iam list-attached-role-policies --role-name CloudWranglerAccessRole

VPC Flow Logs Integration Failing

Common Issues:

1. "S3 bucket not found" - Verify Flow Logs are enabled and bucket exists
2. "Access denied" - Check IAM role permissions for S3 and Athena
3. "No data available" - Wait 15-30 minutes for first logs to arrive
4. "Athena query failed" - Verify Athena database and table are configured

See VPC Flow Logs Troubleshooting for detailed solutions.

Next Steps