AWS outposts documentation change
Summary
Added LAG metrics section and updated existing VIF metrics to include LagId dimension, changed dimension name from OutpostsId to OutpostId, and added explanatory text about CloudWatch widget alignment and backward compatibility.
Security assessment
This change adds monitoring capabilities for Link Aggregation Group (LAG) connections and enhances existing VIF metrics with additional dimensions. While improved monitoring can help detect network issues, there is no evidence in the diff that this addresses a specific security vulnerability, weakness, or incident. The changes are operational improvements for troubleshooting connectivity.
Diff
diff --git a/outposts/latest/network-userguide/outposts-cloudwatch-metrics.md b/outposts/latest/network-userguide/outposts-cloudwatch-metrics.md index c77655a46..557997fa2 100644 --- a//outposts/latest/network-userguide/outposts-cloudwatch-metrics.md +++ b//outposts/latest/network-userguide/outposts-cloudwatch-metrics.md @@ -39,0 +40,2 @@ The `AWS/Outposts` namespace includes the following categories of metrics. + * LAG metrics + @@ -88 +90 @@ Metric | Dimension | Description -`VifBgpSessionState` | **Dimensions for local gateway VIFs** : `OutpostsId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. **Dimensions for service link VIFs** : `OutpostsId`, `VirtualInterfaceId`. | The Border Gateway Protocol (BGP) session state between the AWS Outposts of virtual interface (VIF) and on-premise devices. **Unit** : Values 1 through 6 where: +`VifBgpSessionState` | **Dimensions for local gateway VIFs** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. **Dimensions for service link VIFs** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. `VirtualInterfaceGroupId` always displays as "-" for service link VIFs; included for CloudWatch widget alignment. | The Border Gateway Protocol (BGP) session state between the AWS Outposts of virtual interface (VIF) and on-premise devices. **Unit** : Values 1 through 6 where: @@ -98 +100 @@ Metric | Dimension | Description -`VifConnectionStatus` | **Dimensions for local gateway VIFs** : `OutpostsId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. **Dimensions for service link VIFs** : `OutpostsId`, `VirtualInterfaceId`. | Shows whether the virtual interfaces (VIFs) are ready to forward traffic. **Unit** : 1 or 0 where: +`VifConnectionStatus` | **Dimensions for local gateway VIFs** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. **Dimensions for service link VIFs** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId`. `VirtualInterfaceGroupId` always displays as "-" for service link VIFs; included for CloudWatch widget alignment. | Shows whether the virtual interfaces (VIFs) are ready to forward traffic. **Unit** : 1 or 0 where: @@ -104,2 +106,30 @@ Metric | Dimension | Description -`IfTrafficIn` | **Dimensions for local gateway VIFs (lgw-vif)** : `OutpostsId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId` **Dimensions for service link VIFs (sl-vif)** : `OutpostsId` and `VirtualInterfaceId` | The bitrate of data that the Outposts Virtual Interfaces (VIFs) receive from the connected local network devices. **Unit** : Bits per second **Maximum resolution** : 5 minutes **Statistics** : The most useful statistics are `Max` and `Min`. -`IfTrafficOut` | **Dimensions for local gateway VIFs (lgw-vif)** : `OutpostsId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId` **Dimensions for service link VIFs (sl-vif)** : `OutpostsId` and `VirtualInterfaceId` | The bitrate of data that the Outposts Virtual Interfaces (VIFs) transfer to the connected local network devices. **Unit** : Bits per second **Maximum resolution** : 5 minutes **Statistics** : The most useful statistics are `Max` and `Min`. +`IfTrafficIn` | **Dimensions for local gateway VIFs (lgw-vif)** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId` **Dimensions for service link VIFs (sl-vif)** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId`. `VirtualInterfaceGroupId` always displays as "-" for service link VIFs; included for CloudWatch widget alignment. | The bitrate of data that the Outposts Virtual Interfaces (VIFs) receive from the connected local network devices. **Unit** : Bits per second **Maximum resolution** : 5 minutes **Statistics** : The most useful statistics are `Max` and `Min`. +`IfTrafficOut` | **Dimensions for local gateway VIFs (lgw-vif)** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId` **Dimensions for service link VIFs (sl-vif)** : `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, and `VirtualInterfaceId`. `VirtualInterfaceGroupId` always displays as "-" for service link VIFs; included for CloudWatch widget alignment. | The bitrate of data that the Outposts Virtual Interfaces (VIFs) transfer to the connected local network devices. **Unit** : Bits per second **Maximum resolution** : 5 minutes **Statistics** : The most useful statistics are `Max` and `Min`. + +The `LagId` dimension has been added to the `VifBgpSessionState`, `VifConnectionStatus`, `IfTrafficIn`, and `IfTrafficOut` metrics. This enables you to associate VIF-level metrics with their corresponding LAG, making it easier to identify whether a connectivity issue originates at the VIF configuration level or the physical LAG level. A new CloudWatch widget displays all metrics (existing VIF metrics and new LAG metrics) using the updated dimension name `OutpostId`. The previous widget continues to display with the legacy dimension name `OutpostsId` for backward compatibility. + +### LAG metrics + +AWS Outposts publishes Link Aggregation Group (LAG) status metrics to Amazon CloudWatch. These metrics provide visibility into the operational status of LAG connections between Outpost network devices and your on-premises network devices. Use these metrics together with VIF metrics to correlate physical LAG health with virtual interface and BGP session state for end-to-end connectivity troubleshooting. + +Metric | Dimensions | Description +---|---|--- +`LagStatus` | `OutpostId`, `LagId`, `VirtualInterfaceGroupId`, `VirtualInterfaceId` | The operational status of the LAG connection between an Outpost network device and your on-premises network device. **Unit** : Values where: + + * `1` – LAG is operational (up) + * `0` – LAG is not operational (down) + +**Reporting Criteria** : There is data to report. **Maximum resolution** : 5 minutes **Statistics** : The most useful statistic is `Maximum`. + +The following dimensions are used for the `LagStatus` metric. + +Dimension | Description +---|--- +`OutpostId` | The ID of the Outpost (e.g., op-1234567890abcdef0) +`LagId` | The ID of the Link Aggregation Group (e.g., op-lag-02343ndswe3190d1) +`VirtualInterfaceGroupId` | The ID of the Virtual Interface Group. Always displays as "-" for LAG metrics; included for CloudWatch widget alignment with VIF metrics. +`VirtualInterfaceId` | The ID of the Virtual Interface. Always displays as "-" for LAG metrics; included for CloudWatch widget alignment with VIF metrics. + +###### Important + +If the entire Outpost loses connectivity, the underlying telemetry service cannot collect data from network devices. No metric data points are published during this period, and the CloudWatch graph will show a gap for the affected time range. @@ -126,0 +157 @@ Dimension | Description +`LagId` | The ID of the Link Aggregation Group associated with this VIF.