# Amazon Managed Grafana

Cloud service · AWS. Updated 2026-11-12. Page: https://blowstack.com/tools/cloud-services-hub/amazon-managed-grafana

> Amazon Managed Grafana is a fully managed service by AWS that provides scalable, secure, and easily deployable visualizations for real-time analytics, operational dashboards, and monitoring across various data sources.

Practice exams covering Amazon Managed Grafana: [MLA-C02 (beta) AWS Certified Machine Learning Engineer - Associate](https://blowstack.com/practice-exams/aws-certified-machine-learning-engineer-associate), [SCS-C03 AWS Certified Security - Specialty](https://blowstack.com/practice-exams/aws-certified-security-specialty), [SAA-C03 AWS Certified Solutions Architect - Associate](https://blowstack.com/practice-exams/aws-certified-solutions-architect-associate), [SAP-C02 AWS Certified Solutions Architect - Professional](https://blowstack.com/practice-exams/aws-certified-solutions-architect-professional).

## 6 key features of Amazon Managed Grafana

Amazon Managed Grafana offers a fully managed service with out-of-the-box integration with AWS and other data sources, built-in security, automatic scalability, and enhanced collaboration features, streamlining the process of data visualization and monitoring.

1. **Fully Managed**: Amazon Managed Grafana is fully managed by AWS, reducing the need for users to perform manual setup, maintenance, and scaling operations.
2. **Seamless Integration**: It offers seamless integration with AWS services and other data sources, allowing users to visualize metrics and logs from multiple sources in one place.
3. **Secure by Design**: With built-in security features such as AWS IAM Identity Center or SAML for workspace user authentication and Grafana roles and permissions for fine-grained access control, users can ensure that their data is secure and accessible only to authorized personnel.
4. **Scalability**: Amazon Managed Grafana automatically scales to meet the demand, ensuring that dashboards and visualizations load quickly, even as data volume grows.
5. **Collaboration and Sharing**: Facilitates team collaboration by allowing users to share dashboards and visualizations securely, ensuring that insights can be distributed across teams and departments easily.
6. **AWS Data Source Permission Provisioning**: Amazon Managed Grafana provides permission provisioning for adding supported AWS services as data sources.

## Where Amazon Managed Grafana is used

Amazon Managed Grafana serves as a versatile tool for real-time performance monitoring, infrastructure health visualization, cost optimization, security compliance, and providing analytics for business intelligence.

1. **Real-time Performance Monitoring**: Use Amazon Managed Grafana to visualize and monitor the real-time performance of application workloads deployed across AWS services. This use case involves aggregating metrics, logs, and traces to diagnose and resolve issues quickly, ensuring high availability and performance.
2. **Infrastructure Health Dashboards**: Organizations can leverage Amazon Managed Grafana to create comprehensive dashboards providing instant insights into the health of their cloud infrastructure. This includes visualizations for CPU utilization, memory usage, and network activity, enabling teams to preemptively identify and troubleshoot potential issues.
3. **Cost and Usage Optimization**: With Amazon Managed Grafana, businesses can analyze their AWS cost and usage data to identify trends, uncover inefficiencies, and optimize spending. Grafana dashboards can track expenditures across different services, providing actionable insights to reduce costs while maintaining performance.
4. **Security and Compliance Monitoring**: This use case involves using Amazon Managed Grafana to consolidate security logs and metrics for the purpose of monitoring, visualizing, and analyzing security data in real time. It helps in ensuring compliance with industry regulations and internal policies by providing a clear overview of the security posture.
5. **Application Analytics and Business Intelligence**: Amazon Managed Grafana can be used to aggregate data from various sources, including RDS and DynamoDB, to provide analytics and insights into application usage, user behavior, and business KPIs. Custom dashboards can help in making data-driven decisions to drive growth and improve user experience.

## How Amazon Managed Grafana is priced

Amazon Managed Grafana has a pay-as-you-go model based on active user count and data queried, with an optional Enterprise agreement for discounted rates on committed usage.

- **Pay-As-You-Go**: User licenses are billed monthly per workspace: $9 per active Editor or Administrator and $5 per active Viewer. Each workspace incurs a minimum of one Editor license even if no users log in.
- **Enterprise Plugins**: An Enterprise Plugins license costs an additional $45 per active user per workspace and includes access to Grafana Labs support and on-demand training.
- **API User and Service Account Licenses**: Active API users and service accounts are billed at $9 for Administrator or Editor permissions, or $5 for Viewer permissions. If multiple API keys with different permissions share one API user license, the higher price applies.
- **Free Trial**: A 90-day free trial covers up to five users per account; usage beyond those five users is billed at standard license rates.

## Services Amazon Managed Grafana works with

- **[Amazon CloudWatch](https://blowstack.com/tools/cloud-services-hub/amazon-cloudwatch)**: Amazon CloudWatch is a monitoring and observability service that provides data and actionable insights for AWS, hybrid, and on-premises applications and infrastructure resources.
- **[AWS X-Ray](https://blowstack.com/tools/cloud-services-hub/aws-x-ray)**: AWS X-Ray helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture.
- **[Amazon Athena](https://blowstack.com/tools/cloud-services-hub/amazon-athena)**: Amazon Managed Grafana includes an Athena data source for running SQL queries and displaying their results in dashboards. You can use it to visualize operational or business data queried from Amazon S3.
- **[Amazon Aurora](https://blowstack.com/tools/cloud-services-hub/amazon-aurora)**: Amazon Managed Grafana can query Aurora databases through its MySQL and PostgreSQL data sources, depending on the database engine. Workspace VPC connectivity lets dashboards access databases that are not publicly reachable.
- **[Amazon Aurora Serverless](https://blowstack.com/tools/cloud-services-hub/amazon-aurora-serverless)**: Amazon Managed Grafana can connect to Aurora Serverless databases through its MySQL or PostgreSQL data sources using the database endpoint. Dashboards can run SQL queries to visualize application data.
- **[Amazon EC2](https://blowstack.com/tools/cloud-services-hub/amazon-ec2)**: Amazon Managed Grafana's CloudWatch data source can look up EC2 instance attributes and tags to populate dashboard variables. This lets users select instances by attributes such as instance ID or instance type when exploring their metrics.
- **[Amazon Managed Service for Prometheus](https://blowstack.com/tools/cloud-services-hub/amazon-managed-service-for-prometheus)**: Amazon Managed Grafana can discover Prometheus workspaces and query their metrics using AWS-authenticated data source connections. It can also display alerts from the workspace's Alertmanager.
- **[Amazon OpenSearch Service](https://blowstack.com/tools/cloud-services-hub/amazon-opensearch-service)**: Amazon Managed Grafana can query OpenSearch Service domains to visualize indexed logs and other data. Its OpenSearch data source supports AWS authentication, and workspace VPC connectivity provides access to private domains.
- **[Amazon RDS](https://blowstack.com/tools/cloud-services-hub/amazon-rds)**: Amazon Managed Grafana can query RDS for MySQL and RDS for PostgreSQL through its built-in database data sources. A workspace can connect through a VPC to visualize data from a private database instance.
- **[Amazon Redshift](https://blowstack.com/tools/cloud-services-hub/amazon-redshift)**: Amazon Managed Grafana provides a Redshift data source that executes SQL through the Redshift Data API. Dashboards can visualize warehouse query results using database credentials or supported IAM-based authentication.
- **[Amazon S3](https://blowstack.com/tools/cloud-services-hub/amazon-s3)**: Amazon Managed Grafana's Athena data source uses an S3 query-results location and requires permission to access the relevant bucket. This supports dashboards that visualize data queried from S3 through Athena.
- **[Amazon Simple Notification Service (Amazon SNS)](https://blowstack.com/tools/cloud-services-hub/amazon-simple-notification-service-(amazon-sns))**: Amazon Managed Grafana can publish alert notifications to SNS topics using its SNS notification integration. SNS can then distribute those notifications to the topic's subscribers.
- **[Amazon Timestream](https://blowstack.com/tools/cloud-services-hub/amazon-timestream)**: Amazon Managed Grafana includes a Timestream data source for querying and visualizing time-series records. For example, dashboards can show equipment measurements and trends stored in Timestream tables.
- **[Amazon Timestream for InfluxDB](https://blowstack.com/tools/cloud-services-hub/amazon-timestream-for-influxdb)**: Amazon Managed Grafana can connect to Timestream for InfluxDB using its InfluxDB data source and a query language supported by the database and plugin. Workspace VPC connectivity allows access to private database endpoints.
- **[Amazon VPC](https://blowstack.com/tools/cloud-services-hub/amazon-vpc)**: Amazon Managed Grafana can create network interfaces in selected VPC subnets to reach private data sources and notification destinations. You can also restrict workspace access using VPC endpoint-based network access controls.
- **[AWS CloudFormation](https://blowstack.com/tools/cloud-services-hub/aws-cloudformation)**: Amazon Managed Grafana workspaces can be provisioned and managed using the AWS::Grafana::Workspace CloudFormation resource. Templates can define settings such as authentication providers, workspace permissions, and VPC connectivity.
- **[AWS CloudTrail](https://blowstack.com/tools/cloud-services-hub/aws-cloudtrail)**: Amazon Managed Grafana integrates with CloudTrail to record management API activity, including workspace creation and configuration changes. These records identify the caller, request details, and time of an operation.
- **[AWS Glue](https://blowstack.com/tools/cloud-services-hub/aws-glue)**: Amazon Managed Grafana's Athena data source can use Glue Data Catalog metadata to discover databases and tables for queries. Its data source role needs the relevant Glue permissions to support this discovery.
- **[AWS IAM Identity Center (AWS Single Sign-On)](https://blowstack.com/tools/cloud-services-hub/aws-iam-identity-center-(aws-single-sign-on))**: Amazon Managed Grafana supports IAM Identity Center authentication for workspace users. You can assign users and groups access to a workspace and grant them administrator, editor, or viewer permissions.
- **[AWS Identity and Access Management (IAM)](https://blowstack.com/tools/cloud-services-hub/aws-identity-and-access-management-(iam))**: Amazon Managed Grafana uses IAM policies to control management operations and IAM roles to authorize access to AWS data sources and notification destinations. With service-managed permissions, it can provision the roles needed for supported integrations.
- **[AWS IoT SiteWise](https://blowstack.com/tools/cloud-services-hub/aws-iot-sitewise)**: Amazon Managed Grafana includes an IoT SiteWise data source for browsing industrial assets and querying asset property values. Dashboards can display equipment measurements, historical trends, and calculated metrics.
- **[AWS Marketplace](https://blowstack.com/tools/cloud-services-hub/aws-marketplace)**: Amazon Managed Grafana uses an AWS Marketplace subscription to enable Grafana Enterprise capabilities. Associating the subscription with a workspace provides access to supported Enterprise data source plugins.
- **[AWS Organizations](https://blowstack.com/tools/cloud-services-hub/aws-organizations)**: Amazon Managed Grafana integrates with Organizations to configure service-managed access to AWS data sources across selected organizational units. Its setup can deploy the required IAM roles into member accounts.
- **[AWS PrivateLink](https://blowstack.com/tools/cloud-services-hub/aws-privatelink)**: Amazon Managed Grafana supports PrivateLink interface endpoints for private access to its supported endpoints. Workspace network access controls can restrict access to specified VPC endpoints.
- **[AWS Secrets Manager](https://blowstack.com/tools/cloud-services-hub/aws-secrets-manager)**: Amazon Managed Grafana's Redshift data source can retrieve database credentials stored in Secrets Manager. The workspace's data source role must have permission to read the selected secret.
- **[AWS Security Token Service (AWS STS)](https://blowstack.com/tools/cloud-services-hub/aws-security-token-service-(aws-sts))**: Amazon Managed Grafana uses STS to assume IAM roles and obtain temporary credentials for AWS data sources. This also supports querying data sources in other accounts through appropriately configured role trust and permissions.

## What is Amazon Managed Grafana

Amazon Managed Grafana is a fully managed service that is developed and maintained by Amazon Web Services (AWS) to offer seamless, scalable, and secure Grafana deployments. Grafana, an open-source platform widely recognized for its powerful and flexible capabilities in metrics monitoring, analytics, and visualization, plays a critical role in the observability and operational intelligence space.

It integrates with a vast array of data sources, including Prometheus for metrics, Loki for logs, and Elasticsearch for both, enabling users to aggregate and visualize data to monitor their applications and infrastructure health effectively. Amazon Managed Grafana abstracts away the complexities inherent to setting up, operating, and scaling Grafana in cloud environments. It automates the provisioning of the environment, taking on the responsibility of managing the server infrastructure, setup, maintenance, updates, and security. Users control Grafana version upgrades and can validate a new version before upgrading production workspaces.

A workspace is a logically isolated Grafana server in which you create dashboards and visualizations to analyze metrics, logs, and traces.

The default quota is five workspaces per AWS account per Region, and this quota can be increased.

One of the defining characteristics of Amazon Managed Grafana is its seamless integration with AWS services. It can easily connect with Amazon CloudWatch, AWS X-Ray, Amazon OpenSearch Service, and other AWS data sources, allowing users to visualize and analyze data across various AWS services without the need to manage data ingestion and storage. Moreover, the integration extends beyond AWS, with support for popular third-party data sources, services, and on-premises data, ensuring a comprehensive monitoring solution that can cater to diverse environments.

Workspaces can optionally be upgraded to enable Enterprise data source plugins, including connectors for Datadog, MongoDB, Oracle Database, Salesforce, and Snowflake.

Security in Amazon Managed Grafana is robust, leveraging AWS's secure and compliant infrastructure. It integrates with AWS IAM Identity Center and identity providers supporting SAML 2.0 for workspace user authentication and authorization. This ensures that users can only access the metrics and logs they are authorized to view. Moreover, it supports single sign-on (SSO), making it convenient for teams to access Grafana dashboards without managing separate login systems. Encryption in transit and at rest further assures that data is protected, aligning with best practices and compliance requirements.

Amazon Managed Grafana supports both API keys and service accounts for interacting with Grafana HTTP APIs. Service accounts using service account tokens replace API keys as the primary way to authenticate applications interacting with Grafana. API keys are on a deprecation path and may be fully removed in upcoming major Grafana releases.

Finally, the service is designed to scale seamlessly with the user's needs. It can dynamically adjust based on demand, ensuring that Grafana remains highly available and performant even during traffic spikes. This scalability, coupled with the managed nature of the service, allows organizations to focus on leveraging Grafana for insights rather than worrying about infrastructure management.

In summary, Amazon Managed Grafana offers a powerful, secure, and scalable solution for deploying Grafana, combining the extensive visualization capabilities of Grafana with the ease of use and operational excellence of AWS. It significantly lowers the barrier to entry for organizations looking to deploy sophisticated monitoring and visualization solutions, empowering them to derive actionable insights from their data with minimal operational overhead.

## Concepts related to Amazon Managed Grafana

- [Database Normalization](https://blowstack.com/tools/cloud-concepts-hub/database-normalization): Database normalization organizes relational data into tables according to dependencies to reduce redundancy and prevent inconsistent updates.
- [Event Correlation](https://blowstack.com/tools/cloud-concepts-hub/event-correlation): Event correlation is the process of connecting related events across sources using shared attributes, timing, and rules to identify meaningful activity.
- [Time Series](https://blowstack.com/tools/cloud-concepts-hub/time-series): A time series is a sequence of observations indexed by time that represents how a measured quantity changes.