Skip to main content

Object: Observer

What is this object and why do I care about it?​

The Observer object's purpose is to provide Pyrae with a reference to an AWS Lambda function that implements the Observer Contract.

The Observer is a critical piece of Event Processing Workflow, which uses the Observer to observe the state of the Resources.

When an observer executes, its output is a set of Observances.

As part of Event Processing Workflow, Pyrae invokes the Observer Lambda with credentials for the AWS Accounts containing Resources to be observed. Those credentials are constrained by the IamPolicy specified in the Observer, as a Session Policy

Lifecycle​

This resource can only be created/updated/deleted thru OrgFormation.

OrgFormation​

Pyrae::Observer::Observer Reference

Sample:

OfnResources:
    MyResource:
        Type: "Pyrae::Observer::Observer"
        Properties:
            Name: "MyResource" # optional
            LambdaArn: "arn:aws:lambda:us-west-2:123456789012:function/myfn"
            IamPolicy: >-
                {
                    "Version": "2012-10-17",
                    "Statement": [
                        {
                            "Effect": "Allow",
                            "Action": "s3:GetBucketEncryption",
                            "Resource": "*"
                        }
                    ]
                }
            MetadataJson: "{}"

Pyrae Policy Engine

If you're concerned about monitoring policies in your organization, our Policy Engine can monitor your infrastructure and provide actionable alerts.

Contact Us