Amazon CloudWatch
AWS X-Ray
Amazon Athena
Amazon Aurora
Amazon Aurora Serverless
Amazon EC2
Amazon Managed Service for Prometheus
Amazon OpenSearch Service
Amazon RDS
Amazon Redshift
Amazon S3/covers/Arch_Amazon-Simple-Notification-Service_64.png){kind=small}
Amazon Simple Notification Service (Amazon SNS)
Amazon Timestream
Amazon VPC
AWS CloudFormation
AWS CloudTrail
AWS Glue/covers/Arch_AWS-IAM-Identity-Center_64.png){kind=small}
AWS IAM Identity Center (AWS Single Sign-On)/covers/Arch_AWS-Identity-and-Access-Management_64.png){kind=small}
AWS Identity and Access Management (IAM)
AWS IoT SiteWise
AWS Marketplace
AWS Organizations
AWS PrivateLink
AWS Secrets Manager/covers/Res_AWS-Identity-Access-Management_AWS-STS-Alternate_48.png){kind=small}
AWS Security Token Service (AWS STS)Amazon Managed Grafana is a fully managed service that is developed and maintained by Amazon Web Services (AWS) to offer seamless, scalable, and secure Grafana deployments. Grafana, an open-source platform widely recognized for its powerful and flexible capabilities in metrics monitoring, analytics, and visualization, plays a critical role in the observability and operational intelligence space.
It integrates with a vast array of data sources, including Prometheus for metrics, Loki for logs, and Elasticsearch for both, enabling users to aggregate and visualize data to monitor their applications and infrastructure health effectively. Amazon Managed Grafana abstracts away the complexities inherent to setting up, operating, and scaling Grafana in cloud environments. It automates the provisioning of the environment, taking on the responsibility of managing the server infrastructure, setup, maintenance, updates, and security. Users control Grafana version upgrades and can validate a new version before upgrading production workspaces.
A workspace is a logically isolated Grafana server in which you create dashboards and visualizations to analyze metrics, logs, and traces.
The default quota is five workspaces per AWS account per Region, and this quota can be increased.
One of the defining characteristics of Amazon Managed Grafana is its seamless integration with AWS services. It can easily connect with Amazon CloudWatch, AWS X-Ray, Amazon OpenSearch Service, and other AWS data sources, allowing users to visualize and analyze data across various AWS services without the need to manage data ingestion and storage. Moreover, the integration extends beyond AWS, with support for popular third-party data sources, services, and on-premises data, ensuring a comprehensive monitoring solution that can cater to diverse environments.
Workspaces can optionally be upgraded to enable Enterprise data source plugins, including connectors for Datadog, MongoDB, Oracle Database, Salesforce, and Snowflake.
Security in Amazon Managed Grafana is robust, leveraging AWS's secure and compliant infrastructure. It integrates with AWS IAM Identity Center and identity providers supporting SAML 2.0 for workspace user authentication and authorization. This ensures that users can only access the metrics and logs they are authorized to view. Moreover, it supports single sign-on (SSO), making it convenient for teams to access Grafana dashboards without managing separate login systems. Encryption in transit and at rest further assures that data is protected, aligning with best practices and compliance requirements.
Amazon Managed Grafana supports both API keys and service accounts for interacting with Grafana HTTP APIs. Service accounts using service account tokens replace API keys as the primary way to authenticate applications interacting with Grafana. API keys are on a deprecation path and may be fully removed in upcoming major Grafana releases.
Finally, the service is designed to scale seamlessly with the user's needs. It can dynamically adjust based on demand, ensuring that Grafana remains highly available and performant even during traffic spikes. This scalability, coupled with the managed nature of the service, allows organizations to focus on leveraging Grafana for insights rather than worrying about infrastructure management.
In summary, Amazon Managed Grafana offers a powerful, secure, and scalable solution for deploying Grafana, combining the extensive visualization capabilities of Grafana with the ease of use and operational excellence of AWS. It significantly lowers the barrier to entry for organizations looking to deploy sophisticated monitoring and visualization solutions, empowering them to derive actionable insights from their data with minimal operational overhead.