AWS Global Accelerator Endpoint Group Healthy Host Count Sentinel

id: aws-global-accelerator-healthy-hosts-sentinel
namespace: company.netops

inputs:
  - id: accelerator_arn
    type: STRING
    defaults: arn:aws:globalaccelerator::123456789012:accelerator/1234abcd-56ef-78gh-90ij-1234567890kl
    description: ARN of the AWS Global Accelerator to monitor.
  - id: min_healthy_hosts_threshold
    type: FLOAT
    defaults: 1.0
    description: Minimum required healthy backend hosts per endpoint group before alerting.

tasks:
  - id: query_accelerator_health
    type: io.kestra.plugin.aws.cli.AwsCLI
    region: us-west-2
    accessKeyId: "{{ secret('AWS_ACCESS_KEY_ID') }}"
    secretKeyId: "{{ secret('AWS_SECRET_ACCESS_KEY') }}"
    commands:
      - |
        aws cloudwatch get-metric-statistics           --namespace AWS/GlobalAccelerator           --metric-name HealthyHostCount           --dimensions Name=Accelerator,Value="{{ inputs.accelerator_arn }}"           --start-time $(date -u -v-15m +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u -d "15 minutes ago" +%Y-%m-%dT%H:%M:%SZ)           --end-time $(date -u +%Y-%m-%dT%H:%M:%SZ)           --period 300           --statistics Minimum           --output json > aga_health.json
        python3 -c "
        import json
        with open('aga_health.json') as f:
            dps = json.load(f).get('Datapoints', [])
        min_hosts = min((dp.get('Minimum', 0) for dp in dps), default=0.0)
        result = {
            'accelerator_arn': '{{ inputs.accelerator_arn }}',
            'min_healthy_hosts': min_hosts,
            'alert_triggered': min_hosts < {{ inputs.min_healthy_hosts_threshold }}
        }
        with open('aga_summary.json', 'w') as out:
            json.dump(result, out)
        print('Global Accelerator audit:', result)
        "
    outputFiles:
      - aga_summary.json

  - id: evaluate_accelerator_hosts
    type: io.kestra.plugin.core.flow.If
    condition: "{{
      fromJson(read(outputs.query_accelerator_health.outputFiles['aga_summary.j\
      son'])).alert_triggered }}"
    then:
      - id: alert_edge_team
        type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
        url: "{{ secret('SLACK_WEBHOOK') }}"
        payload: |
          {
            "text": ":rotating_light: *AWS Global Accelerator Degraded Alert*: Accelerator `{{ inputs.accelerator_arn }}` reported healthy host count dropped to {{ fromJson(read(outputs.query_accelerator_health.outputFiles['aga_summary.json'])).min_healthy_hosts }} (threshold: {{ inputs.min_healthy_hosts_threshold }}). Ingress traffic failover may fail."
          }

errors:
  - id: notify_sentinel_error
    type: io.kestra.plugin.slack.notifications.SlackIncomingWebhook
    url: "{{ secret('SLACK_WEBHOOK') }}"
    payload: |
      {
        "text": ":warning: *Global Accelerator Sentinel Failure*: Failed to query CloudWatch metrics for accelerator `{{ inputs.accelerator_arn }}`."
      }

triggers:
  - id: scheduled_aga_check
    type: io.kestra.plugin.core.trigger.Schedule
    cron: "*/10 * * * *"
    disabled: true