AWS Trusted Advisor Specialized2012年〜
A service that checks your AWS environment for cost optimization, performance, security, and resilience improvements
What It Does
AWS Trusted Advisor automatically scans your AWS account resources and provides improvement recommendations across five categories: cost optimization, performance, security, fault tolerance, and service limits. It detects unused EC2 instances, open security groups, underutilized EBS volumes, and more.
Use Cases
Reducing AWS costs (identifying unused resources), detecting security risks (open ports, missing MFA), monitoring service limit proximity, and verifying compliance with AWS best practices.
Everyday Analogy
Think of a household budget consultant. They analyze your finances (AWS resources) and suggest specific improvements like "Cancel this unused subscription (unused resource) to save $XX/month" or "Your front door lock (security) is open."
What Is Trusted Advisor?
AWS Trusted Advisor performs a "health check" on your AWS environment. It scans resources against hundreds of check items and displays results in three levels: red (action required), yellow (investigation recommended), and green (no issues). Basic/Developer support plans include 7 core checks, while Business/Enterprise plans unlock all checks.
Five Check Categories
Cost Optimization detects unused EC2, EBS, EIP, and idle RDS instances. Security detects open security groups, missing root MFA, and public S3 access. Fault Tolerance detects single-AZ resources and missing backups. Performance detects overloaded resources. Service Limits detects quotas approaching their limits. For technical background on the five check categories, reference books on Amazon are a useful resource.
Getting Started
Access the Trusted Advisor console and available check results are displayed automatically. Full checks require a Business or higher support plan. Integration with the Trusted Advisor API and EventBridge enables automated result retrieval and remediation actions.
Things to Watch Out For
- Full checks require a Business or higher support plan. Basic/Developer plans only include 7 core checks
- Check results auto-refresh, but manual refresh has a 5-minute cooldown