Prerequisites
- An AWS account with the services you want to monitor (CloudWatch, RDS, S3)
- Permissions to create IAM roles and policies in your AWS account
Step-by-Step Setup
1. Navigate to Integrations
In your Corelayer dashboard, go to the Integrations page.2. Add AWS Integration
Click the Add Integration button and select AWS from the list of available integrations.3. Select Services
Choose which AWS services you want Corelayer to monitor:- CloudWatch — Log group monitoring and analysis
- RDS — Database instance monitoring
- S3 — Bucket access for relevant data
4. Enter Your AWS Account Number
Provide your 12-digit AWS account number. Corelayer will generate an external ID for secure cross-account access.5. Create the IAM Policy
Corelayer will provide a JSON policy document. Create this policy in your AWS IAM console:- Go to IAM > Policies > Create Policy
- Select the JSON tab
- Paste the provided policy document
- Name the policy (e.g.,
CorelayerPolicy)
6. Create the IAM Role
Create an IAM role for Corelayer to assume:- Go to IAM > Roles > Create Role
- Select Custom trust policy
- Paste the trust policy provided by Corelayer (includes the external ID)
- Attach the policy you created in the previous step
- Name the role (e.g.,
CorelayerRole)
7. Enter the Role ARN
Copy the ARN of the role you created and paste it into the Corelayer setup form. Click Test Connection to verify access.8. Select Resources
Once connected, select the specific resources you want Corelayer to monitor:- CloudWatch Log Groups — Choose which log groups to include
- RDS Instances — Select database instances to monitor
- S3 Buckets — Pick buckets relevant to your services
9. Add AWS Resources to Your Service Maps
When configuring your Corelayer Service Maps, select which AWS resources are relevant to each service.What Corelayer Can Do With AWS
Once connected, Corelayer will:- Monitor CloudWatch log groups for errors and anomalies
- Query RDS database instances to gather context during debugging
- Access S3 buckets for configuration and data context
- Correlate AWS resource data with other integrations to identify root causes
Managing Your Integration
Disconnecting
To disconnect your AWS integration:- Navigate to Settings > Integrations
- Find your AWS integration and click Uninstall
- Confirm the uninstallation
- Optionally, delete the IAM role and policy from your AWS account
Troubleshooting
Integration Not Working?
- Verify the IAM role ARN is correct
- Ensure the trust policy includes the correct external ID
- Check that the IAM policy grants the required permissions
- Confirm the role can be assumed by Corelayer’s AWS account
- Verify the selected resources exist and are accessible