Amazon ACM Monitoring in ObserveOps
Overview
The Amazon ACM integration with ObserveOps (formerly known as AIOps) collects operational telemetry and configuration inventory from AWS Certificate Manager, Amazon's managed SSL/TLS certificate service. It monitors certificate states, renewal eligibility, domain validation records, and expiry timelines across your AWS accounts.
These metrics help administrators track certificate health, detect approaching expirations, and verify domain validation status to prevent outages caused by expired or misconfigured certificates.
Prerequisites
- AWS Certificate Manager is enabled in the target AWS account and region.
- The IAM role or user used for integration has read access to ACM resources (
acm:ListCertificates,acm:DescribeCertificate). - Required ACM API endpoints are reachable from ObserveOps.
- The AWS account is added in discovery with correct credentials and region configuration.
List of Supported KPIs
Certificate
| Metric | Description | Type |
|---|---|---|
| aws.acm.certificate.status | Current status of the ACM certificate. | String |
| aws.acm.certificate.renewal.status | Status of the certificate's pending renewal. | String |
| aws.acm.certificate.renewal.eligibility | Indicates whether the certificate is eligible for managed renewal. | String |
| aws.acm.certificate.in.use | Indicates whether the certificate is currently in use by an AWS resource. | Boolean |
| aws.acm.certificate.in.use.resources | Number of AWS resources currently using this certificate. | Count |
| aws.acm.certificate.sans | Number of Subject Alternative Names (SANs) on the certificate. | Count |
| aws.acm.domain.validations | Number of domain validation entries associated with the certificate. | Count |
| aws.acm.domain.validation | Domain name subject to validation. | String |
| aws.acm.domain.validation.status | Validation status for a specific domain on the certificate. | String |
| aws.acm.certificate.days.to.expiry | Number of days until the certificate expires. | Count |