Amazon Managed Service for Grafana (AMG) is a highly scalable, highly available, and fully managed service for open source Grafana, providing interactive data visualization for your monitoring and operational data. Using AMG, you can visualize, analyze, and alarm on your metrics, logs, and traces collected from multiple data sources in your observability system, including AWS, third-party ISVs, and other resources across your IT portfolio. AMG offloads the operational management of Grafana by automatically scaling compute and database infrastructure as usage demands increase, with automated version updates and security patching. AMG natively integrates with AWS services so you can securely add, query, visualize, and analyze your AWS data across multiple accounts and regions with a few clicks in the AWS Console. AMG integrates with AWS Single Sign-On (AWS SSO) so you can easily set up user access to specific dashboards and data sources for only certain users in your corporate directory.
Visualize and correlate data across multiple data sources
AMG connects to multiple data sources, enabling you to visualize, analyze, and correlate your metrics, logs, and traces in a unified dashboard. AMG securely and natively integrates with AWS services such as Amazon Managed Service for Prometheus, making it simple to query your AWS data across multiple accounts and multiple Regions in a single console. For example, you can create a dashboard that correlates container metrics from Amazon Managed Service for Prometheus, AWS services metrics from Amazon CloudWatch, and logs from Amazon Elasticsearch Service to monitor the health and performance of your applications running in containers. In the same console, you can layer and visualize data from self-managed data sources like Graphite, and third-party ISVs like Datadog and Splunk in the same dashboard. Click here to view a full list of supported data sources.
ABOVE: An example of an AMG dashboard visualizing data from AWS X-Ray as a data source. Click here to view the full list of supported data sources.
Get started easily with pre-built panels and dashboards
AMG makes it easy to construct the right queries and customize the display properties so that you can create the dashboard you need. With multiple pre-built dashboards for various data sources, you can instantly start visualizing and analyzing your application data without having to build dashboards from scratch.
A dashboard is a set of one or more panels organized and arranged into one or more rows. Panels are the basic visualization building blocks in AMG, and are visual representations of your queries. Your queries display data over time, such as temperature fluctuations and current status, or lists of logs or alerts. Using a panel, you can choose from a wide variety of styling and formatting options, and apply visualizations to your data, such as graphs, bar gauges, heatmaps. Each panel can interact with data from any configured data source.
AMG also provides guided query building to help you get familiar with different query languages, so you can focus on spot-checking specific metrics, or deep dive into a log error without having to save or edit a team dashboard. In Explore mode, you can also view historical queries to jumpstart on-demand troubleshooting and help reduce mean time to resolution.
ABOVE: An example of a pre-built dashboard visualizing Amazon CloudWatch data for an Amazon EC2 instance. AMG provides pre-built dashboards to help you get started quickly.
Set up alerts to identify issues quickly
By quickly identifying unintended changes in your system, you can minimize disruptions to your services. With AMG, you can configure alerts using the graph visualization panel to identify problems in your system moments after they occur. You define the alert rule, how often it should be evaluated, the conditions that must be met for the alert to trigger, and how the alert notification should be delivered.
Share dashboards easily with user authentication and authorization
With AMG, you can easily share interactive dashboards with specific users or across teams within your organization. With AWS SSO integration, you can leverage your existing corporate directory services to grant user access and authentication to your Grafana workspaces. You can assign user Read/Write or Read-Only roles by giving them Administrator, Editor, or Viewer privileges. You can also create Teams to restrict dashboard and data source access to the right users. AMG integrates with popular corporate directory services including Microsoft Active Directory, Okta Universal Directory, and Azure Active Directory (Azure AD).
Troubleshoot and collaborate with your team
You can create multiple Grafana Teams to easily grant data source access permissions and share dashboards to groups of users. New team members added later will also inherit access permissions to shared resources without having to manually grant permissions one dashboard at a time. Users can view and edit dashboards in real time, track dashboard version changes, and easily share dashboards with other users in the same Team so that everyone is viewing the same data while troubleshooting operational issues. Users can also easily share dashboards with other teams or external entities by creating dashboard snapshots that can be publicly accessed.
Security and authentication
AMG tightly integrates with multiple AWS services to meet your corporate security and compliance requirements. Access to AMG is authenticated through AWS SSO, enabling re-use of existing trust relationships between AWS and your corporate user directories. You can track changes made to Grafana workspaces for compliance and audit tracking using audit logs provided by AWS CloudTrail. AMG also natively integrates with multiple AWS data sources including Amazon Elasticsearch Service, Amazon CloudWatch, AWS X-Ray, AWS IoT SiteWise, Amazon Timestream, and Amazon Managed Service for Prometheus, so you don’t have to manually manage IAM credentials and permissions for each data source. AMG also discovers the resources in your account across multiple Regions and across your Organizational Units, and automatically provisions the right IAM policies to access your data. Third-party auditors assess the security and compliance of AMG as part of multiple AWS compliance programs, including SOC, PCI, FedRAMP, and HIPAA.
No servers to manage
With a few clicks in the AMG console, you can instantly create one or many workspaces to visualize and analyze your metrics, logs, and traces without having to build, package, or deploy any hardware or infrastructure. AMG automatically provisions, configures, and manages the operations of your Grafana workspaces, with automatic version upgrades to ensure that your Grafana workspaces are always up-to-date with the latest features. The service auto scales to meet your dynamic usage demands.
Highly available and secure
Automatic recovery and patching
AMG workspaces are highly available with multi-AZ replication. AMG also continuously monitors the health of your Grafana workspaces and replaces unhealthy nodes, without impacting your access to Grafana workspaces. AMG manages the availability of your compute and database nodes so that you don’t have to start, stop, or reboot any infrastructure resources.
Encryption and security
AMG encrypts your data at rest without special configuration, third-party tools, or additional cost. AMG also encrypts data in-transit via TLS.
Upgrade to Grafana Enterprise directly from the AWS Console
You can optionally upgrade to Grafana Enterprise via an AWS Marketplace purchase from the AMG console. This gives you access to additional enterprise plugins for a wide variety of third-party ISVs, including AppDynamics, Datadog, Dynatrace, New Relic, Oracle Database, ServiceNow, Snowflake, and Splunk. It also gives you direct access to consultation and support provided by Grafana Labs experts, as well as to hands-on custom training courses.
ABOVE: AMG dashboard visualizing data from Snowflake, ServiceNow, New Relic, and Datadog. Their Grafana plugins are available for use in AMG with an optional upgrade to Grafana Enterprise.