AWS Global Accelerator

AWS Global Accelerator is a service in which you create accelerators to improve the performance of your applications for local and global users. Depending on the type of accelerator you choose, you can gain additional benefits:

• With a standard accelerator, you can improve availability of your internet applications that are used by a global audience. With a standard accelerator, Global Accelerator directs traffic over the AWS global network to endpoints in the nearest Region to the client.
• With a custom routing accelerator, you can map one or more users to a specific destination among many destinations.

For more details, refer to the AWS documentation.

Log and metric types

• CloudWatch Metrics
• Flow Logs
• CloudTrail Logs

Setup

You can collect the logs and metrics for Sumo Logic's AWS Global Accelerator integration by following the below steps.

Configure metrics collection

• Collect CloudWatch Metrics with namespace AWS/GlobalAccelerator using the AWS Kinesis Firehose for Metrics source. For AWS/GlobalAccelerator metrics and dimensions, refer to AWS Global Accelerator CloudWatch metrics.

Configure logs collection

• Collect Flow Logs using Amazon S3 source. Flow logs enable you to capture information about the IP address traffic going to and from network interfaces in your accelerator in AWS Global Accelerator. Flow log data is published to Amazon S3. Flow logs can help you with a number of tasks. For example, you can troubleshoot why specific traffic is not reaching an endpoint, which in turn helps you diagnose overly restrictive security group rules. You can also use flow logs as a security tool to monitor the traffic that is reaching your endpoints.

• Collect AWS CloudTrail Logs using AWS CloudTrail source. AWS Global Accelerator is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Global Accelerator. CloudTrail captures all API calls for Global Accelerator as events, including calls from the Global Accelerator console and from code calls to the Global Accelerator API. If you create a trail, you can enable continuous delivery of CloudTrail events to an Amazon S3 bucket, including events for Global Accelerator.