It can be challenging to optimise AWS resources across cost, performance, security, and fault-tolerance, much less do it automatically. Attendees will learn how to implement automation of AWS best practice recommendations from AWS Trusted Advisor, and remediation from the AWS Health API on AWS resources.

1. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Automated Monitoring of
Operational Health in the Cloud
Mathew Green, Enterprise Support Manager, AWS

2. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Do you really know what’s running in
your AWS accounts?

3. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
It starts with a simple website...
With increased traffic and customer requirements, his
application and architecture scaled up!
JOE

4. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Staying on top of it all becomes difficult at scale
…without the right tools
That’s a lot of
work !

5. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Challenges of Complexity and Scale
• Lack of fault-tolerance, disruption from service events and
maintenance
• Security vulnerabilities
• Performance gaps
• Unexpected bills and unused resources
• Lots of heavy lifting for monitoring resources and implementing
best practices

6. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
What if you could get best practice monitoring
for all of the resources in your account?
What if you could get this automatically?

7. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Trusted Advisor
• Takes away the heavy lifting
• Provides you with confidence that you are monitoring the right things
Red (action recommended)
Yellow (investigation recommended)
Green (no problem detected)

8. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Trusted Advisor (TA) Features
CloudWatch Metrics Integration
• Shows check status trends over time
• Allows you to customise alert thresholds against TA checks
Service Limit Dashboard
• Provides detailed data about service limits across EC2, EBS, RDS and
others
• Allows you to check and refresh each limit independently so you can
see changes reflected quickly

9. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How does Trusted Advisor work?
Integrates with CloudWatch Events to notify you when
you need to take action

10. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
How to leverage Trusted Advisor
Tag resources subject to TA optimization
actions
Create an IAM policy and role for the
Lambda function to use
Setup up a CloudWatch event rule to
trigger the Lambda function
Setup the Lambda function to take actions
recommended by Trusted Advisor

11. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Example
Amazon
CloudWatch
event
(event-based)
AWS
Lambda
AWS
Lambda
AWS Trusted
Advisor
instance
• Trusted Advisor Trigger EC2 instance Low Utilization
• Notify user to Chime / Chat
• User Acknowledge and trigger Lambda to shutdown
Instance

12. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Stopping unused instances saves $$$

13. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Step Functions allow you to trigger multiple
actions
Coordinate the components of distributed applications
and microservices using visual workflows

14. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Example: Trusted Advisor detecting exposed IAM
access keys
AWS Trusted
Advisor
event
(event-based)
AWS Step
Functions
Amazon
CloudWatch IAM
AWS
CloudTrail
Amazon
SNS
IAM Key
Publicly
Exposed

15. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
What about singular events, scheduled
changes and AWS health events?

16. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Health allows you to trigger events using CloudWatch
• Visibility and Transparency to your resource
• Remediation guidance and knowledge articles
• Integration for notifications and custom
actions
x
x
AWS
Health
Amazon
CloudWatch
Events

17. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
x
You can be notified of these events in multiple ways
AWS
Health
x
x
x
Personal
Health
Dashboard
Direct API
CloudWatch
Events
Amazon
ElasticSearch

18. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
snapshotinstance volume
JOE
AWS_EBS_VOLUME_LOST
Example: EBS failure

19. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
event
(event-based)
AWS Step
Functions
Amazon
ElasticSearch
Amazon
CloudWatch
JOE
AWS
CloudFormation
snapshot
instance
AMI
Elastic IP
address
AWS Health
Service
Amazon
SNS
Example continued: EBS automatically restored from
snapshot

20. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
JOE

21. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Check out the existing examples at:
https://github.com/aws/aws-health-tools
and
https://github.com/aws/Trusted-Advisor-
Tools/
Contribute to the opensource repos

22. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Enablement Training
2 Day Workshop
Checkpoints
Account Manager & Solution Architect,
Account Plan, Opportunity Review
ISV Deliverables
Multi-tenanted Architecture
2 x AWS Professional Certifications
AWS Deliverables
Sandbox Credits ($20k), Summit or
re:Invent sponsorship, This is My
Architecture & Solution Space listing
SaaS
Enablement Training
2 Day Workshop
Checkpoints
Monthly Office Hours, Deep Drive
Architecture sessions & Roadmap
Sharing, Opportunity Review
ISV Deliverables
Scalable Self Healing Architecture
2 x AWS Associate & 1 DevOps
Certifications
AWS Deliverables
Sandbox Credits ($10k), GTM Plan, MDF
($20k) & Partner Connections
Modernize
Enablement Training
1 Day Workshop
Checkpoints
Virtual Fortnightly Office Hours
ISV Deliverables
Replatformed High Availability
Architecture (QuickStart or Marketplace
Listing), Technical Essentials
AWS Deliverables
Sandbox Credits ($10k), Well Architected
Review, Demo Day
Timeframe: 3 Months
Migrate
Timeframe: 6 Months
Timeframe: 1 Year
AWS TechShift Accelerator
Sydney 5th February 2019
Melbourne 7th February 2019
Sydney 14-15th May 2019
Melbourne 16-17th May 2019
Register Your Interest: https://aws.amazon.com/events/techshift/accelerator/

23. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
GET TRAINED AND CERTIFIED ON AWS
Benefits to APN Partners:
• Free Digital Training, including AWS Cloud
Practitioner Essentials
• Online Accreditation Training courses to
learn at your own pace
• ILT and vILT sessions of our Solutions
Training for Partners (STP) courses
• Discounted Classroom Training for APN
Partners
• AWS Credits available when achieving AWS
Certification (all Partner Tiers)
Next steps:
1. Enroll now! aws.training
2. Talk to your Account Manager or Partner Development team (aws-anz-pdr@amazon.com) for more
details!

24. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Thank You