Gateway Audit

The Aviatrix Controller periodically checks the Aviatrix gateways in AWS it launched to make sure:

  1. The Aviatrix gateway instance in AWS has its IAM role aviatrix-role-ec2 attached.
  2. The aviatrix-role-app role exists and has policies attached to it.
  3. The Aviatrix gateway instance’s security group has an inbound rule that opens to the Controller EIP on port 443

When any of the above condition fails, the Controller sends an alert email to the Controller admin and logs the event.

When any of the above condition fails, the gateway will not be able to receive messages from the Controller. Therefore the event requires immediate action as it will lead to operation outage.

Audit Status Description
Pass The gateway has passed the most recent audit.
Error(SG) The gateway instance’s security group does not have an inbound rule that is open to the Controller’s EIP
Error(IAM) The gateway instance’s aviatrix-role-ec2 is detached from the instance profile or aviatrix-role-app does not have associated policy.

If you need help, email to support@aviatrix.com