All Apps and Add-ons

Splunk_TA_aws, aws_iam_role and VPC endpoints

antonyp
New Member

Hello,

I want to install a Splunk forwarder in an EC2 to collect AWS metrics but i have a problem.
I configured AWS_STS_REGIONAL_ENDPOINTS=regional environment variable to use regional endpoint instead of generic sts.amazonaws.com. The goal is to call private VPC endpoints to speak with AWS services. But I can't find a proper way to configure sts region to use. Default region seems to be hard coded in DEFAULT_REGION (/opt/splunk/etc/apps/Splunk_TA_aws/bin/splunk_ta_aws/common/credentials.py).

For now I use sed -i 's/us-west-1/eu-west-1/g' /opt/splunk/etc/apps/Splunk_TA_aws/bin/splunk_ta_aws/common/credentials.py to fix my problem but is it very ugly. Do you know a proper way to do that ? Maybe a feature request ?

Thanks

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

A Guide To Cloud Migration Success

As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus ...

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...