AWS Cloud Operations Blog
Category: HAQM Athena
Cost optimization in AWS using HAQM CloudWatch metric streams, AWS Cost and Usage Reports and HAQM Athena
You can use metric streams to create continuous, near-real-time streams of HAQM CloudWatch metrics to a destination of your choice. Metric streams make it easier to send CloudWatch metrics to popular third-party service providers using an HAQM Kinesis Data Firehose HTTP endpoint. You can create a continuous, scalable stream that includes the most up-to-date CloudWatch […]
Using AWS Migration Hub network visualization to overcome application and server dependency challenges
When you embark on a cloud migration, it can be challenging to identify application and server dependencies. In some organizations, IT assets are maintained in a spreadsheet that is updated infrequently. Some organizations have configuration management database (CMDB) software, but it tends to be outdated or unusable. It lacks the infrastructure data that is essential […]
Use HAQM Athena and AWS CloudTrail to estimate billing for AWS Config rule evaluations
AWS Config is a service that enables you to audit your AWS resources for compliance to a desired configuration state. You are billed based on the number of Configuration Items (a point-in-time snapshot of an AWS resource) recorded and the number of AWS Config rules (a function that reports resource compliancy) evaluated per resource per […]
How to automate capture and analysis of CI/CD metrics using AWS DevOps Monitoring Dashboard solution
Across the world, organizations are investing in DevOps tools to improve productivity in their software delivery process. Customers tell us that they want to collect performance and operational metrics on their continuous integration/continuous delivery (CI/CD) pipeline, to quantify value from DevOps automation investments and to identify opportunities to improve efficiency in software delivery capabilities. However, […]
Use HAQM Athena and HAQM QuickSight to build custom reports of AWS Well-Architected Reviews
AWS Well-Architected helps cloud architects build secure, high-performing, resilient, and efficient infrastructure for their applications and workloads. Based on five pillars — operational excellence, security, reliability, performance efficiency, and cost optimization — AWS Well-Architected provides a consistent approach for customers and partners to evaluate architectures, and implement designs that can scale over time. You can […]
Visualizing AWS Config data using HAQM Athena and HAQM QuickSight
In this guest post, Henrik André Olsen, Solutions Architect, discusses how he visualized AWS Config data in HAQM QuickSight dashboards with a high value for the Danish insurance company Topdanmark. If you are an AWS Config user, you are probably already familiar with how to use the AWS Config console to access data, but it’s […]
View AWS Trusted Advisor recommendations at scale with AWS Organizations
Since 2014, AWS Trusted Advisor has been providing customers with visibility into an individual AWS account and providing recommendations based on known AWS best practices. Trusted Advisor makes recommendations to help customers achieve a better security posture, control their costs, optimize application performance, design better fault tolerance, and maintain control over their AWS service limits […]
Identifying resources with the most configuration changes using AWS Config
AWS Config tracks changes made to supported resources and records them as configuration items (CIs), which are JSON files delivered to an HAQM S3 bucket. These are delivered in 6-hour intervals, as configuration history files. Each file contains details about the resources that changed in that 6-hour period, for the respective resource types, such as […]
Build your own software asset governance platform on AWS
Software Asset Governance or Software Asset Management is a key component of an organization’s cyber security strategy. Different aspects of Software Asset Governance find notable mentions in renowned security frameworks and standards such as SANS CIS Critical Security Controls, NIST Special Publication 800-53, and Cloud Security Alliance’s Cloud Control Matrix. The subject goes beyond cyber-security […]
Analyzing HAQM VPC Flow Log data with support for HAQM S3 as a destination
In a world of highly distributed applications and increasingly bespoke architectures, data monitoring tools help DevOps engineers stay abreast of ongoing system problems. This post focuses on one such feature: HAQM VPC Flow Logs. In this post, I explain how you can deliver flow log data to HAQM S3 and then use HAQM Athena to […]