Icon source: AWSAWS Trusted Advisor is an online tool offered by Amazon Web Services (AWS) that provides users with guidance to follow best practices for the use of AWS resources. The service evaluates a customer's AWS environment through best-practice checks to identify ways to improve system performance and reliability, enhance security, and reduce costs. By leveraging the wealth of knowledge and best practices accumulated by AWS, Trusted Advisor acts as a personalized consultant, advising on how to optimize AWS infrastructure in various areas.
The core functionality of AWS Trusted Advisor is rooted in its capability to scan AWS environments across six distinct categories: cost optimization, performance, security, fault tolerance, operational excellence, and service limits. Within these categories, Trusted Advisor checks for potential issues or areas of improvement and provides specific recommendations on how to address them. For instance, in the domain of cost optimization, it might suggest ways to reduce excess resource provisioning or identify idle resources that could be terminated to save costs. In terms of security, it will alert users if there are publicly accessible resources, such as S3 buckets, or if security groups are overly permissive, thereby potentially exposing resources to unnecessary risk.
Performance checks focus on ensuring that the configuration of resources is optimal for high efficiency. This could involve recommendations to upgrade instances or to leverage different services that better match the workload profile. Fault tolerance analyses aim to ensure that the AWS environment is robust against failures, suggesting strategies such as cross-region backup or multi-AZ (availability zone) deployment for critical components to ensure high availability. Finally, the service limit checks are designed to help users avoid hitting service usage limits that could disrupt their operations, by predicting and alerting them when they are approaching these limits.
AWS Trusted Advisor is accessible to all AWS users, but the level of access to its recommendations varies. Users with a basic AWS account have limited access to a subset of the checks, mainly those in the security and service limits categories. Customers with AWS Business Support+, Enterprise Support, or Unified Operations have access to the full set of Trusted Advisor checks.
Trusted Advisor Priority provides context-driven recommendations prioritized by your AWS account team to help you focus on the most important findings.
Most items in a Trusted Advisor report provide action links to the AWS Management Console, where users can implement the recommendations. In essence, AWS Trusted Advisor embodies the shift towards a more managed and advisory-driven cloud experience. By proactively identifying potential issues and opportunities for optimization, it plays a crucial role in helping organizations leverage AWS resources more effectively and safely, ensuring that their cloud environments are not only well-configured and cost-effective but also aligned with the best practices for cloud architecture.
AWS Cost Explorer
Amazon EC2
Amazon RDS
AWS CloudTrail
AWS Config
Amazon CloudFront
Amazon VPC/covers/Arch_AWS-Identity-and-Access-Management_64.png){kind=small}
AWS Identity and Access Management (IAM)
Amazon S3
AWS Support