Icon source: AWS

CLOUD SERVICE · AWS

AWS Trusted Advisor

AWS Trusted Advisor is an online tool that provides real-time guidance to help users optimize their Amazon Web Services (AWS) infrastructure for cost, performance, security, and fault tolerance by scanning their environment and offering recommendations based on best practices.

Cloud Services Hub →

What is AWS Trusted Advisor

Read the extensive description

AWS Trusted Advisor is an online tool offered by Amazon Web Services (AWS) that provides users with guidance to follow best practices for the use of AWS resources. The service conducts a real-time analysis of a customer's AWS environment to identify ways to improve system performance and reliability, enhance security, and reduce costs. By leveraging the wealth of knowledge and best practices accumulated by AWS, Trusted Advisor acts as a personalized consultant, advising on how to optimize AWS infrastructure in various areas.

The core functionality of AWS Trusted Advisor is rooted in its capability to scan AWS environments across five distinct categories: cost optimization, performance, security, fault tolerance, and service limits. Within these categories, Trusted Advisor checks for potential issues or areas of improvement and provides specific recommendations on how to address them. For instance, in the domain of cost optimization, it might suggest ways to reduce excess resource provisioning or identify idle resources that could be terminated to save costs. In terms of security, it will alert users if there are publicly accessible resources, such as S3 buckets, or if security groups are overly permissive, thereby potentially exposing resources to unnecessary risk.

Performance checks focus on ensuring that the configuration of resources is optimal for high efficiency. This could involve recommendations to upgrade instances or to leverage different services that better match the workload profile. Fault tolerance analyses aim to ensure that the AWS environment is robust against failures, suggesting strategies such as cross-region backup or multi-AZ (availability zone) deployment for critical components to ensure high availability. Finally, the service limit checks are designed to help users avoid hitting service usage limits that could disrupt their operations, by predicting and alerting them when they are approaching these limits.

AWS Trusted Advisor is accessible to all AWS users, but the level of access to its recommendations varies. Users with a basic AWS account have limited access to a subset of the checks, mainly those in the security and service limits categories. Customers who subscribe to AWS support plans, such as Business or Enterprise support levels, gain full access to all the checks and recommendations Trusted Advisor offers, along with support to help interpret and implement those recommendations.

Moreover, AWS provides automated actions in some instances, allowing users to implement suggested changes with just a few clicks directly through the Trusted Advisor dashboard. In essence, AWS Trusted Advisor embodies the shift towards a more managed and advisory-driven cloud experience. By proactively identifying potential issues and opportunities for optimization, it plays a crucial role in helping organizations leverage AWS resources more effectively and safely, ensuring that their cloud environments are not only well-configured and cost-effective but also aligned with the best practices for cloud architecture.

Key AWS Trusted Advisor Features

AWS Trusted Advisor provides recommendations for cost optimization, performance improvement, security enhancement, fault tolerance, and service limit monitoring to optimize AWS environments.

Cost Optimization

AWS Trusted Advisor analyzes your AWS environment and provides recommendations on how to reduce costs by eliminating unused or underutilized resources.

Performance

Provides insights on how to improve the speed and responsiveness of your applications by monitoring your configuration and usage patterns.

Security

Offers advice on how to enhance the security of your AWS resources by checking for open ports, suggesting the use of MFA, and more, to help protect your AWS environment against potential threats.

Fault Tolerance

Helps in improving the availability and redundancy of your AWS applications by identifying potential single points of failure and recommending solutions.

Service Limits

Monitors your service usage and provides alerts when you are close to reaching your service limits, helping you to manage and request increases before services are throttled or disrupted.

AWS Trusted Advisor Use Cases

AWS Trusted Advisor offers a comprehensive set of checks covering cost optimization, performance improvements, security enhancements, fault tolerance improvement, and service limits monitoring to help users effectively manage their AWS resources and ensure best practices are followed.

Cost Optimization

AWS Trusted Advisor analyzes your AWS environment and provides recommendations on where you could save costs by highlighting underutilized resources or suggesting changes to more cost-effective service options. This includes advice on Reserved Instance purchases, identifying idle resources, and optimizing data transfer costs.

Performance Improvement

This service examines your deployed resources and configurations to provide suggestions that enhance system performance. By recommending adjustments such as configuring Amazon EBS volumes for higher throughput or optimizing Amazon EC2 instances, Trusted Advisor helps in ensuring that your applications are running efficiently.

Security Enhancement

Trusted Advisor evaluates your environment against AWS best practices for securing your resources. It checks for wide-open security groups, S3 bucket permissions, IAM use, and multi-factor authentication on root accounts, among others, to identify potential security vulnerabilities and advises on tightening security measures.

Fault Tolerance Improvement

By analyzing the resilience of your AWS architecture, Trusted Advisor provides recommendations on how to enhance fault tolerance. This includes advice on setting up Multi-AZ deployments for critical components, improving backup and disaster recovery strategies, and ensuring reliable and scalable deployments.

Service Limits Monitoring

Trusted Advisor monitors your usage and warns you when youâre approaching service limits of your deployed AWS resources. This helps in proactive scaling and requesting limit increases before these limits can impact your operations, ensuring uninterrupted service.

AWS Trusted Advisor pricing models

AWS Trusted Advisor offers free Core checks to all customers, with full functionalities available to Business and Enterprise support plan holders, priced based on AWS usage.

Basic and Core Checks and Recommendations

AWS Trusted Advisor provides all AWS customers with access to six Core checks and recommendations around service limits, security groups - specific ports unrestricted, IAM use, underutilized Amazon EBS volumes, estimated monthly savings, and low utilization Amazon EC2 instances. There is no additional charge for Basic checks; they are available to all AWS customers.

Full Trusted Advisor Benefits

Customers with a Business or Enterprise support plan have access to the full suite of Trusted Advisor checks and recommendations, which encompasses several categories such as cost optimization, performance, security, fault tolerance, and service limits. The full benefits require an AWS support plan, the pricing of which varies based on a percentage of your AWS usage and minimum monthly fees apply.

Services AWS Trusted Advisor integrates with

AWS Cost Explorer

Trusted Advisor uses data from AWS Cost Explorer to provide cost optimization recommendations. It helps identify areas where you can save money by eliminating unused resources or switching to more cost-effective options.

Amazon EC2

Trusted Advisor checks your EC2 instances for underutilization, overutilization, and configuration best practices. It provides recommendations for rightsizing instances, enabling features like Auto Scaling, and improving cost efficiency and performance.

Amazon RDS

Trusted Advisor reviews your RDS instances for configuration best practices, including backup settings, Multi-AZ deployments, and security groups. It helps ensure that your RDS databases are highly available, secure, and cost-effective.

AWS CloudTrail

Trusted Advisor integrates with CloudTrail to ensure that logging is enabled for account activity, which is crucial for security and compliance. It verifies that CloudTrail is configured correctly and that logs are being stored securely

AWS Config

Trusted Advisor works with AWS Config to provide continuous monitoring of your AWS resources and compliance with best practices. AWS Config tracks changes to your resources, and Trusted Advisor uses this information to offer recommendations.

Amazon CloudFront

Trusted Advisor provides recommendations for CloudFront distributions to ensure they are configured for optimal performance and security. It checks for configurations like SSL certificates and caching settings.

Amazon VPC

Trusted Advisor examines your VPC setup, including security groups and network ACLs (Access Control Lists), to identify potential security risks and optimize network configurations. It provides recommendations for improving network security and performance.

AWS Identity and Access Management (IAM)

Trusted Advisor checks your IAM configuration for security best practices, such as the use of MFA (Multi-Factor Authentication) on root accounts, least privilege permissions, and the rotation of access keys. It helps improve the security posture of your AWS environment.

Amazon S3

Trusted Advisor examines your S3 buckets for security best practices, such as ensuring buckets are not publicly accessible and that server-side encryption is enabled. It also provides cost optimization recommendations by identifying unused or underutilized S3 storage.

AWS Support

Trusted Advisor is integrated with AWS Support, providing access to detailed recommendations and reports through the AWS Support Center. Customers with Business or Enterprise Support plans receive additional checks and priority recommendations.