AWS Cloud Operations & Migrations Blog

Category: Management & Governance

Secure cloud assets using AWS Service Catalog’s Attribute Based Access Control

This post describes how Expedia Group protects production database assets from accidental or automated deletion using the new Attribute Based Access Control (ABAC) feature for AWS Service Catalog. We also cover the benefits of scaling using an ABAC strategy and how Expedia incorporated ABAC to their Cerebro platform. Prerequisites AWS Service Catalog AWS Identity and […]

Automate AWS Systems Manager activation for hybrid-managed node registration

AWS Systems Manager (formerly known as SSM) is an AWS service that you can use to view and control your servers on AWS cloud and on-premises infrastructure. Systems Manager makes it easy to manage a hybrid environment. To set up servers and virtual machines (VMs) in your hybrid environment as Systems Manager managed instances, you […]

Using Amazon CloudWatch metrics math to monitor and scale resources

Many applications require monitoring, scaling, and alerting across multiple dimensions. This requirement adds operational complexity for Developer Operations (DevOps) teams, as they must track numerous discrete data points. Instead, you can use Amazon CloudWatch metric math to create composite metrics quickly and easily. In this post, you’ll learn to apply these concepts to monitoring dashboards, […]

Using Business Agility to Unlock Business Value while Migrating to AWS

In a recent article by McKinsey, ” Unlocking value: Four lessons in cloud sourcing and consumption”, enterprises estimate that around 30% of their cloud spend is wasted. Furthermore, approximately 80% of enterprises consider managing cloud spend a challenge. Even though over 70% of enterprises cite optimizing cloud spend as a major goal, it remains an […]

Integrate administrator approval for EC2 Image Builder AMIs using AWS Systems Manager

Building Amazon Machine Images (AMIs) for your Amazon Elastic Compute Cloud (Amazon EC2) instances or Docker containers is a crucial step that will define the baseline for many of your workloads. AWS released a service called EC2 Image Builder (Image Builder) to help you build your pipelines more simply. Customers have different requirements depending on […]

Bulk edit of OpsItems in AWS Systems Manager OpsCenter

In a previous post, we discussed using Operational insights in Systems Manager OpsCenter to help you identify duplicate issues and noisy event sources. However, there are still situations where you will have numerous OpsItems that require updating. Instead of manually editing one-by-one, you can use a nifty feature for bulk editing of Opsitems in AWS […]

Announcing AWS Config Custom Rules using Guard Custom policy

AWS Config lets you evaluate your AWS resources with a desired configuration state using AWS Config Rules. In AWS Config, you can define two types of rules, managed rules and custom rules. Managed rules are AWS provided rules that will evaluate your resources with a predefined configuration state that address some of the most common […]

How to auto add new cross-account Amazon EC2 instances in a central Amazon CloudWatch dashboard

Managing various metrics of Amazon Elastic Compute Cloud (Amazon EC2) instances in multiple accounts can be challenging, especially if new instances are launched regularly. Amazon CloudWatch has a cross-account dashboard functionality that provides you with cross-account visibility to various metrics without having to log in and out of different accounts. In addition, CloudWatch dashboards are […]

Tracking feature flags in Jira with AWS AppConfig

A key element of agile software development is the team agreeing on the “definition of done.” Before completing a project or feature, the team should document acceptance criteria that must be met to consider the work complete. A project or feature is “done” when all of the acceptance criteria are met and when value is […]

Centralized view of support cases opened from multiple AWS accounts using AWS Systems Manager

AWS Systems Manager Explorer is a customizable operations dashboard that reports information about your AWS resources. Explorer displays an aggregated view of operations data (OpsData) for your AWS accounts and AWS Regions. OpsData also includes information from supporting AWS services, such as AWS Trusted Advisor, AWS Compute Optimizer, and AWS Support Center cases, among other […]