Skip to content

Latest commit

 

History

History
33 lines (18 loc) · 2 KB

README.md

File metadata and controls

33 lines (18 loc) · 2 KB
Raw

AWS IoT TwinMaker Datasource

  1. Go to Configuration → Datasources and click “Add data source”

  2. Find the AWS IoT TwinMaker Datasource under the “Industrial & IoT” section

  3. On the datasource settings page choose your authentication provider

    1. The credentials resolved from the auth provider are used to make AWS calls for queries in the backend plugin
    2. The same credentials are used on the browser for our custom panels, so make sure your permissions are scoped down
    3. EC2 users: you can use “AWS SDK Default” to resolve credentials from your instance IAM role. It is a security risk to expose these credentials on your browser so you MUST set an additional IAM role with scoped down permissions. See here for information on setting up permissions to assume roles.

  4. You need to set an "Assume Role ARN" for any environment Grafana is running in. This is an IAM role you create for your TwinMaker workspace.

    a. This plugin assumes the role provided with an inline session policy to ensure the desired permission scope is used on the browser. We will only use permissions that intersect with the inline policy.

  5. (Optional) Set an External ID if your role is assumed from a separate account

  6. (Optional) AWS developers may use a custom endpoint for testing

    a. Note: You cannot currently set an "Assume Role ARN" and a custom endpoint together

  7. Select your region

  8. Click "Save & test" to load your workspaces

    a. The error "Missing WorkspaceID configuration" is expected to appear

  9. Select your TwinMaker workspace ID. Any query that uses this datasource instance will have access to resources within the workspace.

  10. Click “Save & test”