AWS Cloud Operations Blog
Category: Configuration, compliance, and auditing
Using AWS CodePipeline to deploy AWS Config conformance packs created with the Rule Development Kit
As consultants, we often help customers manage AWS services using infrastructure as code (IaC). We follow DevOps practices for building, versioning, testing, and deploying services. We also use AWS Config custom and managed rules to evaluate the configuration settings of AWS resources. AWS Config continuously tracks the configuration changes that occur among AWS resources and […]
Cost optimization with nOps and CloudTrail
This post is co-authored by JT Giri, CEO and Founder at nOps, and Tomo Sakatoku, Principal Partner Solutions Architect at AWS Cost optimization is always critical to everyone. Customers make lots of effort to make sure their AWS Platform operates cost-effectively. AWS provides tools to help customers optimize and visualize costs. AWS Cost Explorer provides […]
AWS CloudTrail Best Practices
September 8, 2021: Amazon Elasticsearch Service has been renamed to Amazon OpenSearch Service. See details. AWS CloudTrail gives you a history of AWS calls for your account, including API calls made through the AWS Management Console, AWS SDKs, and command line tools. As a result, you can identify: Which users and accounts called AWS APIs […]
Manage Microsoft’s 90-day license assignment rules with AWS License Manager
AWS License Manager makes it easier to manage your software licenses across AWS and on-premises environments. AWS License Manager lets administrators create customized licensing rules that emulate the terms of their licensing agreements, apply these rules to keep track of licenses used, and control whether an Amazon Elastic Compute Cloud (Amazon EC2) instance should be […]
Using AWS Config custom resources to track any resource on AWS
AWS Config is a powerful service you can use to track infrastructure resources and simplify compliance. AWS Config continuously monitors and records your resource configurations. It also allows you to use AWS Config rules to automate the evaluation of recorded configurations against desired state. You can use its remediation actions to address noncompliant resources and […]
Use AWS License Manager APIs for the bulk import of license configurations and entitlements
When customers migrate workloads to the cloud, they can often substantially reduce costs by using their existing software licenses. AWS License Manager makes it possible for customers to allocate their existing licenses to their cloud-hosted workloads, enforce licensing rules to avoid falling out of compliance, and automate the tracking and management of the resources that […]
Manage license compliance during migration of workloads to AWS
When customers migrate workloads to the cloud, they can often substantially reduce costs by using their existing software licenses. In most cases, this is as simple as reallocating licenses from their on-premises infrastructure to Amazon Elastic Compute Cloud (Amazon EC2) instances. Because software audits and true-ups are increasingly routine these days, customers must remain compliant […]
The latest from AWS Organizations (Spring 2021)
AWS Organizations provides features customers can use to manage their AWS environment across accounts. When paired with other AWS services, AWS Organizations helps you manage permissions, create and share resources, govern your environment, and centrally control your security requirements. Here’s what the team has been up to since our virtual 2020 re:Invent season. Use attribute-based […]
Set up an organization-wide aggregator in AWS Config using a delegated administrator account
AWS Config provides a detailed view of the configuration of AWS resources in your AWS account. With AWS Config, you can review changes in configurations and relationships between AWS resources, explore resource configuration histories, and use rules to determine compliance. An aggregator is an AWS Config resource type that collects AWS Config configuration and compliance […]
Use AWS License Manager and AWS Systems Manager to discover SQL Server BYOL instances
Most enterprises find it hard to maintain control of the commercial licensing of Microsoft, SAP, Oracle, and IBM products due to limited visibility. They wind up over-provisioning licenses to avoid the headache with third party license providers or under-provisioning licenses, only to be faced with steep penalties. If your enterprise uses AWS, you can address this […]