運用管理

Amazon Managed Grafana

A fully managed Grafana service that integrates over 30 data sources including CloudWatch, Prometheus, and Timestream to build operational dashboards

About 4 min read

Overview

Amazon Managed Grafana is a fully managed visualization and monitoring service built on open-source Grafana. It eliminates the need for server provisioning and version upgrades, and comes with built-in authentication integration via IAM Identity Center (formerly SSO) or SAML 2.0, private connectivity to VPC data sources, and workspace-level multi-tenant isolation. You can leverage Grafana's plugin ecosystem as-is and connect to over 30 data sources including CloudWatch, Amazon Managed Service for Prometheus, Timestream, X-Ray, Athena, and Redshift.

Workspace Design and Data Source Connectivity

A Managed Grafana workspace corresponds to an independent Grafana instance. Separating workspaces by team, environment (production/development), or project keeps access control and dashboard management organized. Data source connections can be automated through the AWS data source configuration feature, allowing you to add CloudWatch or Prometheus data sources with a single click. IAM role-based authentication eliminates the need to manage access keys for each data source. To connect to VPC-hosted data sources (RDS, OpenSearch, self-managed Prometheus servers, etc.), configure a VPC endpoint connection. Cross-account data sources are also supported, enabling you to aggregate CloudWatch metrics from multiple accounts within an Organization onto a single dashboard. Grafana's alerting feature can detect threshold breaches and send notifications to SNS, PagerDuty, or Slack. Workspace pricing is $9 USD per active user per month for Editors and $5 USD for Viewers, providing a scalable per-user billing model.

Prometheus Metrics Visualization Pipeline

The combination of Managed Grafana and Amazon Managed Service for Prometheus (AMP) is the standard monitoring stack for Kubernetes environments. A Prometheus agent on an EKS cluster (AWS Distro for OpenTelemetry or Prometheus server remote write) sends metrics to AMP, and Managed Grafana draws dashboards using AMP as a data source. By leveraging Grafana's template variables, you can build interactive dashboards that dynamically switch between clusters, namespaces, and Pods. PromQL (Prometheus Query Language) enables flexible queries to express CPU usage percentiles, memory growth trends, and request rate anomaly detection. Grafana dashboards can be exported and imported as JSON, so you can manage dashboard definitions as code with Terraform or CloudFormation and maintain consistent monitoring configurations across environments. For a systematic study of monitoring and observability, books on monitoring (Amazon) are a great resource. Importing community-published dashboard templates (Kubernetes cluster overview, Node Exporter, NGINX Ingress, etc.) saves you the effort of building dashboards from scratch.

CloudWatch Integration and Operational Dashboard Best Practices

Whether to use CloudWatch dashboards or Managed Grafana depends on your operations team's needs. CloudWatch dashboards are self-contained within the AWS Console and provide basic metric visualization at no additional cost. Managed Grafana's decisive advantage, however, is its ability to unify multiple data sources on a single dashboard. You can display CloudWatch metrics, Prometheus container metrics, Timestream IoT data, and Athena business metrics side by side on one dashboard, giving you a holistic view from infrastructure to business. A recommended approach for effective dashboard design in practice is a three-tier structure. The first tier is an executive summary (SLA achievement rate, error rate, key KPIs). The second tier provides team-level service details (latency distribution, throughput, resource utilization). The third tier offers troubleshooting-level detailed metrics (individual instances, log correlation). Use Grafana's folder and team features to organize dashboards, and manage viewing permissions for each tier through role-based access control.

共有するXB!

Related Terms

Amazon CloudWatchAmazon OpenSearch ServiceAmazon TimestreamAWS X-Ray

Related Services

Amazon Managed Service for PrometheusAmazon CloudWatchAmazon TimestreamAWS X-Ray

Related Articles

Why CloudWatch Has 1-Minute and 5-Minute Metrics - The Trade-off Between Monitoring Granularity and CostThis article explains the technical and economic reasons behind the split between CloudWatch basic monitoring (5 minutes) and detailed monitoring (1 minute), the step-down aggregation of metric retention periods, and the high-resolution mode for custom metrics.Time Series Databases - Efficiently Managing IoT and Metrics Data with Amazon TimestreamLearn how to manage, query, and analyze time series data with Amazon Timestream. Covers storing IoT sensor data and application metrics, automatic tiered storage, and SQL-based analysis.How AWS Keeps Time Internally - Amazon Time Sync Service and Leap Second Smearing DesignLearn how Amazon Time Sync Service works, how GPS and atomic clocks provide high-precision time sources, the design decision to absorb leap seconds through smearing, and why time synchronization matters in distributed systems.Implementing Feature Flags with AWS AppConfig - Safe Configuration Deployment and RollbackRoll out configuration changes independently from code deployments using Linear and Exponential strategies. Ensure safety with automatic rollback triggered by CloudWatch alarms.Why Auto Scaling Scales Out Fast but Scales In Cautiously - The Design Intent Behind Asymmetric Decision LogicThis article explains why EC2 Auto Scaling executes scale-out immediately while applying a cooldown period for scale-in, the flapping prevention mechanism, and the internal logic of target tracking scaling.

Similar Terms and Articles

Building a Unified Observability Dashboard with Amazon Managed GrafanaLearn how to build a multi-source observability dashboard by integrating CloudWatch, Prometheus, and OpenSearch data sources.Amazon Managed GrafanaA managed Grafana service for visualizing AWS data sources and building dashboardsAmazon Managed Service for PrometheusA Prometheus-compatible managed monitoring service for collecting, querying, and alerting on container metricsContainer Monitoring with Amazon Managed Service for Prometheus - Collecting and Analyzing EKS MetricsCollect EKS/ECS metrics in a Prometheus-compatible format and query them with PromQL. Learn how to build a container monitoring platform integrated with Managed Grafana.The Integration Power of the AWS Observability Stack - Operational Transparency Through CloudWatch, X-Ray, and CloudTrailThis article examines the integration level of the AWS observability stack centered on CloudWatch, X-Ray, and CloudTrail, comparing it with Azure Monitor and GCP Cloud Logging to explain how the three pillars of metrics, traces, and logs drive differences in operational quality.