initial commit

modules/ManagementGovernance/Monitoring.OpenSearch/README.md

@@ -0,0 +1,27 @@
+# Monitoring module 
+This module deploys the default cloudwatch metric monitoring
+
+## Notes
+Terraform lifecycle ignores tags to speed up terraform subsequent update. Cloudwatch alarm tags cannot be read on aws console anyway.
+
+## Example
+```terraform
+module "es-domains" {
+  source        = "../../modules/util/resource-list"
+  resource-type = "opensearch"
+}
+
+module "es-monitoring" {
+  cw-alarm-prefix           = local.cw-alarm-prefix
+  for_each                  = module.es-domains.result-set
+  source                    = "../../modules/ManagementGovernance/Monitoring.OpenSearch"
+  default-tags              = local.default-tags
+  domain-name               = each.value
+  threshold-CPUUtilization  = 90
+  threshold-IndexingLatency = 3
+  threshold-SearchLatency   = 3
+  # threshold-KibanaHealthyNodes = 1
+  actions-enabled = var.actions-enabled
+  sns-targets = var.sns-targets
+}
+```

modules/ManagementGovernance/Monitoring.OpenSearch/main.tf

@@ -0,0 +1,22 @@
+data "aws_caller_identity" "this" {}
+
+resource "aws_cloudwatch_metric_alarm" "ES-alarms" {
+  for_each                  = var.settings
+  alarm_name                = "${each.value["ecccode"]}-ES_${var.domain-name}-${each.value["metric"]}"
+  comparison_operator       = each.value["comparison_operator"]
+  evaluation_periods        = each.value["evaluation_periods"]
+  metric_name               = each.value["metric"]
+  period                    = each.value["period"]
+  statistic                 = each.value["statistic"]
+  threshold                 = each.value["threshold"]
+  alarm_description         = "ES:${each.value["metric"]}"
+  namespace                 = "AWS/ES"
+  insufficient_data_actions = []
+  actions_enabled           = var.actions-enabled
+  alarm_actions             = [each.value["action"]]
+  ok_actions                = [each.value["action"]]
+  dimensions = {
+    DomainName = var.domain-name
+    ClientId   = data.aws_caller_identity.this.id
+  }
+}

modules/ManagementGovernance/Monitoring.OpenSearch/provider.tf

@@ -0,0 +1,9 @@
+terraform {
+  required_version = "~> 1.3.0"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = ">= 4.36.1"
+    }
+  }
+}

modules/ManagementGovernance/Monitoring.OpenSearch/variables.tf

@@ -0,0 +1,4 @@
+variable "cw-alarm-prefix" {}
+variable "actions-enabled" {}
+variable "domain-name" {}
+variable "settings" {}