Synchronize Server Resources in AWS

Overview

QueryPie offers AWS integration for seamless server registration and management. With this integration, you can synchronize resources from AWS and register them as servers within QueryPie. Additionally, you can grant access to these servers for users and groups, set policies, and even automatically add server groups to scaled-out servers to apply predefined access permissions.

Register AWS Integration Information in QueryPie

1. Navigate to Server Settings > Connection Management > Cloud Providers for Server menu.

2. Click on the Create Provider button located in the upper-right corner.

3. In the Name field, enter a descriptive name to identify this provider.

4. In the Cloud Provider field, select “Amazon Web Services”.

5. In the Region field, select the region for the resources you want to synchronize.

6. Enter the required Credential information to synchronize the resource.

   1. Refer to the section below for a description of each credential method: Setting Up Authentication Methods By Credential Type.

7. You can use Search Filter to get a list of some types of resources that you want to synchronize.

   1. Search Filter works the same way as search in AWS. You can use values such as name, host, OS, tags, and more as filters, and you can conveniently enter your search criteria and filters using the Enter key in the order below.

      1. Enter a value for Key and press Enter -> Select a search condition and press Enter -> Enter a value for Value and press Enter

   2. For more detailed usage instructions, refer to the User Guide for Linux Instances (AWS).

8. In the Replication Frequency field, select the desired synchronization method.

   1. Manual : Synchronize resources manually as needed.

   2. Scheduling : Schedule periodic synchronization using Cron Expressions.

9. Use Automatic Server Group Addition to automatically assign newly registered servers to a server group based on their registered tags in AWS.

   1. Automatic server grouping only applies to servers newly added via cloud sync, and does not affect servers already registered in QueryPie.

   2. Each server can only be assigned to one server group, and will be assigned to the group that first matches the tagging rules from top to bottom.

10. Click the Save button to save the Cloud Provider.

Q. I clicked the Save button, but I get the error "Already exists cloud provider." Why is that?

A. If you receive the error message 'Already exists cloud provider' after clicking the Save button, it means that you have already registered a Cloud Provider with Default Credentials for the same Region. To resolve this issue, select a different Region for registration.

Set Up Authentication Methods By Credential Type

• Default Credentials: If your QueryPie server is deployed within the same AWS account as the resources you wish to synchronize, you can utilize the Instance Profile IAM permissions. Assign the AmazonEC2ReadOnlyAccess policy to the EC2 instance where QueryPie is installed to enable resource synchronization within the same AWS environment.

• Cross Account Role: To synchronize resources from different AWS accounts, you can create an IAM role. Follow the on-screen instructions to create permissions and assign policies for synchronization. Ensure to set the AWS account where QueryPie is installed in the AWS_ACCOUNT_ID entry of the environment variable file to facilitate resource synchronization through this credential.

• Profile Credential: You have the option to create an IAM role to synchronize resources from other AWS accounts.

• Access Key: With this authentication method, manual synchronization is possible. After saving the configuration, initiate a one-time synchronization by providing the Access Key of your AWS account when clicking the Synchronize button on the Provider details screen.

Synchronize and Manage Registered AWS Cloud Providers

1. Navigate to Server Settings > Connection Management > Cloud Providers for Server menu.

2. Click on the desired cloud provider you registered to access its details screen.

3. Click the Synchronize button in the top right corner to begin synchronizing your resources with AWS.

4. You can monitor the synchronization progress in the Synchronization Log that appears. Additionally, you can review the synchronization history in the Settings > Systems > Jobs menu.

5. Please note that after registering a cloud provider, certain provider information cannot be changed:

   1. Name : Changeable

   2. Cloud Provider : Cannot be changed

   3. Region : Cannot be changed

   4. Credential : Cannot be changed

   5. Role ARN : Cannot be changed

   6. Search Filter : Changeable

   7. Replication Frequency : Changeable (except when Credential is Access Key)

Related Topics

• Synchronize Server Resources in GCP

• Synchronize Server Resources in Azure

• Register Servers Manually

• Manage Servers as a Group

Back to Manage Servers and Server Accounts