Hello I am using vanilla prometheus which is running on a server, I have a workspace created as an amazon managed service for prometheus. I want to remote _ write from prometheus to AMP. If I use access key and secret key, error logs say: security token is invalid, but there is no option to specify…

Thank you everyone for the suggestions. I realized I was using credentials that were refreshed every 5 min, hence the security token invalid error. Created and used static credentials for remote_write and it worked.

You have to use Prometheus 2.26 and the new “sigv4” settings.

Can you please provide us your configuration (after removing the passwords)

Sure, This is the remote_write part in prometheus.yml remote_write: - url: "https://aps-workspaces.us-east-1.amazonaws.com/workspaces/wsID/api/v1/remote_write" sigv4: region: us-east-1 access_key: ACCESSKEY secret_key: SECRETKEY

This looks like. Is is possible that your access_key / secret_key lack sufficient permissions to be used ?

It seems that your access key must have the aps:RemoteWrite permission. is it the case? https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-and-IAM.html

I’ll check the RemoteWrite permission once

This is not the case. It has all required permissions

Can you try something please? Use awscurl to check what you get from this: $ awscurl --region us-east-1 --service aps "https://aps-workspaces.us-east-1.amazonaws.com/workspaces/$YOUR_AMP_WORKSPACE_ID/api/v1/query?query=prometheus_api_remote_read_queries" Also, after the merge of the si…

I’ve tried awscurl command, this is what I got: Error 405 Client Error: Method Not Allowed for url I’ve also checked the blog that you’ve linked - I see it uses helm and kubernetes clusters. My scenario: I have vanilla prometheus installed, configured and running on a sever and I want to write to…

Prometheus remote write to AMP

Prometheus server

Rakshitha May 11, 2021, 8:58am 3

Hey, I am using prometheus 2.26 and sigv4 settings. In here when specify my access key and secret key, it says security token invalid.

Topic		Replies	Views
Role_arn doesn't work while sigv4 to remote write to aws instance Prometheus server	1	702	September 27, 2022
Remote write to AMP using sigv4 Prometheus server	0	354	June 24, 2024
Remote write API General Help/Support	1	1849	April 4, 2023
Unable to remote write to AWS managed Prometheus workspace General Help/Support	6	2885	November 3, 2022
Prometheus remote_write server returned HTTP status 405 method not allowed Prometheus server	0	2647	April 18, 2022

Prometheus remote write to AMP

Related topics