AWS outposts: Add monitoring guidance for local gateway VIF connectivity
Summary
Adds a section on monitoring local gateway VIF connection status and BGP session state via console and CloudWatch metrics, including a note on dimension name differences.
Security assessment
Adds monitoring/observability guidance (CloudWatch metrics and alarms for VIF status and BGP sessions), which supports network availability monitoring but does not address a specific vulnerability.
Evidence
You can monitor the connection status and BGP session state of your local gateway virtual interfaces from the AWS Outposts console.
Diff
diff --git a/outposts/latest/network-userguide/vif-vif-groups.md b/outposts/latest/network-userguide/vif-vif-groups.md index 39125b74c..179a8e83b 100644 --- a//outposts/latest/network-userguide/vif-vif-groups.md +++ b//outposts/latest/network-userguide/vif-vif-groups.md @@ -6,0 +7,2 @@ +Monitoring local gateway connectivity + @@ -12,0 +15,2 @@ Local gateway virtual interfaces (VIFs) is a logical interface component of Outp + * Monitoring local gateway connectivity + @@ -157,0 +162,8 @@ Deleting a VIF group will delete all the VIFs in the group. You cannot undo this +## Monitoring local gateway connectivity + +You can monitor the connection status and BGP session state of your local gateway virtual interfaces from the AWS Outposts console. In the console, navigate to your Outpost and choose the **Local Gateway Virtual Interfaces** tab. The **Network Status** column shows whether each VIF is up and ready to forward traffic. Choose the status link to open a pre-built Amazon CloudWatch graph showing `VifConnectionStatus` and `VifBgpSessionState` for that VIF. These metrics are published automatically to the `AWS/Outposts` namespace for all Outpost VIFs and require no additional setup. To receive proactive notification when a VIF goes down or a BGP session is no longer in the `Established` state, you can optionally create a CloudWatch alarm on either metric. For descriptions of metric values and dimensions, see [CloudWatch metrics for Outposts racks](./outposts-cloudwatch-metrics.html). + +###### Note + +If you build dashboards or alarms directly against the `VifConnectionStatus` or `VifBgpSessionState` metrics, note that the dimension name differs depending on which CloudWatch widget you use: the updated widget uses `OutpostId`, while the legacy widget still uses `OutpostsId` for backward compatibility. Confirm which dimension name your dashboard or alarm definition expects to avoid missing data. For more information, see [Metrics](./outposts-cloudwatch-metrics.html#outposts-metrics). +