AWS Trusted Advisor performs checks across several categories to evaluate your AWS environment and provide recommendations for optimization, cost reduction, security enhancement, fault tolerance improvement, and performance optimization. The main categories of checks performed by AWS Trusted Advisor include:
1. Cost Optimization:
-
Unused EC2 Instances: Identifies EC2 instances that have been running but are not actively being used, recommending termination or downsizing.
-
Underutilized Amazon EBS Volumes: Identifies EBS volumes with low I/O activity or low utilization, recommending resizing or termination.
-
Unassociated Elastic IP Addresses: Flags Elastic IP addresses that are not associated with EC2 instances, suggesting disassociation to avoid unnecessary costs.
-
Idle Load Balancers: Identifies Elastic Load Balancers that have no active instances registered, recommending removal to save costs.
2. Performance:
-
EC2 Instance Performance: Analyzes CPU utilization and network throughput of EC2 instances, suggesting resizing for better performance or cost optimization.
-
Elastic Load Balancer Performance: Checks the health and performance of Elastic Load Balancers, providing recommendations for optimization.
-
RDS Performance: Analyzes the performance metrics of Amazon RDS instances, suggesting resizing or configuration changes for better performance.
3. Security:
-
Security Group Access: Identifies overly permissive security group rules, recommending tightening of security controls to reduce the attack surface.
-
IAM Use: Analyzes IAM usage and recommends rotating access keys periodically to enhance security.
-
S3 Bucket Permissions: Flags S3 buckets with public or unrestricted access, recommending access control modifications to prevent data exposure.
4. Fault Tolerance:
-
High Availability: Evaluates the high availability of your architecture, suggesting best practices for fault tolerance, such as Multi-AZ deployments and auto-scaling.
-
EBS Snapshots: Checks the status and configuration of EBS snapshots, providing recommendations for snapshot creation and management to improve data durability and recovery.
5. Service Limits:
-
Resource Limits: Alerts you when you're approaching or exceeding service limits in your AWS account, helping you avoid service disruptions and plan for scaling requirements.
-
API Request Limits: Monitors API request rates and alerts you if you're approaching limits that could affect application performance or availability.
These categories cover a wide range of aspects of your AWS environment, helping you optimize costs, enhance security, improve performance, ensure fault tolerance, and stay within service limits. By addressing the recommendations provided by AWS Trusted Advisor, you can maximize the efficiency, reliability, and security of your AWS infrastructure.
