Operational intelligence
In a cloud environment, organizations need in-depth visibility into every resource across multiple accounts and Regions. Operational intelligence software solutions can help AWS Control Tower administrators automate tool integration, enabling complete visibility and insights in real-time.
Tigera
Calico Cloud is a pay-as-you-go security and observability SaaS platform for containers, Kubernetes, and cloud. It deploys workload access controls, enforces consistent security policies, ensures continuous compliance, provides end-to-end live observability, and troubleshoots applications across multi-cluster and multi-cloud Kubernetes environments. Calico Cloud scales automatically with managed clusters to ensure security, continuous compliance, and uninterrupted, real-time observability.
Calico Cloud features include:
Workload access controls
Enterprise security and compliance
Observability and troubleshooting
Unified control: multi-cluster management
Support for multiple data planes – eBPF, Linux, Windows
See how it works
How it works
Additional resources provided by Tigera
As a result, Cloudify scaled to sixty customer deployments per month, streamlined user experience, and reduced security controls and policies implementation from days to minutes.
Cloudify
Sysdig
Sysdig Secure DevOps Platform helps teams secure the build, while detecting and responding to threats. It also continuously manages configurations and compliance, and monitors containers, Kubernetes, and cloud services. Sysdig is a Software-as-a-Service (SaaS) platform that provides deep visibility across workloads and cloud infrastructure.
Sysdig features include:
Cloud Security
Kubernetes Security
Image Scanning
Runtime Security
Continuous Compliance
Monitoring & Troubleshooting
Incident Response & Forensics
See how it works
How it works
Additional resources provided by Sysdig
Implementation guide
There is no better choice than Sysdig to meet our monitoring and security needs. Sysdig reports on our entire AWS infrastructure, including infrastructure and application events.
Ryan Staatz
Systems Architect, LogDNASUSE
Overview
SUSE Linux Enterprise for SAP Applications is the number-one Linux platform for SAP in a physical, virtualized, private or public cloud environment. It is endorsed by SAP and preferred by more than 30,000 customers because it reduces risk from service outages, fosters innovation with maintenance automation, and deploys new services faster, on prem and in the cloud.
SUSE Linux Enterprise for SAP Applications features include:
Built-in business continuity - SUSE Linux Enterprise High Availability Extension delivers multiple high-availability / disaster recovery configuration options, integrated with automated data recovery for SAP HANA, and live Linux kernel patching
Performance optimization
Additional security to secure SAP HANA in memory systems with a built in firewall and protect data in remote data centers with enhanced encryption management.
Rapid data recovery
Fast SAP application deployment
Advanced monitoring - Proactively identify system issues before failures with server and SAP application-specific operational data collection and export for visualization.
Integrated 24x7 support
How it works
Additional resources provided by SUSE
Implementation guide
SUSE is the platform of choice that we migrate customers onto, especially when you look at in-memory applications, such as SAP HANA.
Ben Lingwood
CTO, LemongrassCloudGuard
Overview
CloudGuard is a comprehensive cloud native security platform for visibility, workload protection, and posture management of cloud workloads and services.
CloudGuard features include:
Cloud asset visualization, including network topology, firewalls and more
Comprehensive posture management with automated continuous compliance to enforce regulatory requirements
CloudBots with auto-remediation solutions for AWS
Continuous monitoring and automation reversion of unauthorized modifications
Privileged identity protection featuring just-in-time privilege elevation with out-of-band authorization
How it works
Additional resources provided by CloudGuard
Implementation guide
Speed is a key benefit in secure DevOps, but teams often think that there’s a tradeoff between speed and security. That’s not always the case. With CloudGuard Dome9’s Dynamic Access Leases, we were able to provide just-in-time access for our DevOps teams to allow for rapid yet secure access which was a major enabler for our IT operations.
Robert Berger
CTO & SVP Engineering, OmnywayCutover
Overview
Cutover is a work orchestration and observability platform that allows teams to plan, orchestrate, and analyze complex workflows. It integrates with AWS Control Tower to accelerate your migration, drive effective governance, reduce risk, and ensure standardization. Cutover’s automation runbooks work with existing toolsets to allow teams to achieve full visibility, control, and streamlined communications across their multi-account AWS environments.
Cutover features include:
Live visualization for successful coordination, optimization, and de-risking
Real-time dashboards for live visibility and progress-sharing
Automation runbooks with integrations for 20+ tools
Advanced analytics for nearly continuous improvement and audit
Audit trail to satisfy regulatory and compliance requirements
Imbedded communications sequenced alongside tasks
How it works
Additional resources provided by Cutover
Implementation guide
Cutover...continues to add huge value...it’s likely to be a new paradigm for technology and the way we work!
Anonymized User, Chief Information Officer (CIO), Multinational Bank
Datadog
Overview
Datadog Pro is a unified monitoring platform with infrastructure monitoring, application performance monitoring, log management, user experience (UX) monitoring, and more. By bringing together data from distributed sources, it provides a consolidated view across multi-account AWS environments to enhance your cloud health, work, and performance.
Datadog Pro features include:
Infrastructure, network, security, and UX monitoring
Application performance management (APM) visibility into modern applications
Log management
80+ integrations with AWS products including AWS Control Tower
AWS Control Tower adds Datadog monitoring to any new AWS accounts you provision
How it works
Additional resources provided by Datadog
With the explosion in the number of environments, comes the need to actually watch everything that is going on. Datadog provides the ability to monitor everything from a single location with relatively simple configuration.
Eric Lee
Site Reliability Engineer, TrueCarDynatrace
Overview
Dynatrace provides software intelligence to simplify cloud complexity. With automatic and intelligent observability at scale, it delivers precise answers about the performance of cloud platform environments. It seamlessly integrates with AWS Control Tower and securely governs AWS Accounts as soon as they are created. A smart baselining capability adapts dynamically and monitors the performance of your multi-account environments in real-time.
Dynatrace’s automatic and intelligent observability platform includes:
Application performance monitoring
Infrastructure monitoring
Artificial intelligence for IT operations (AIOps)
Digital experience monitoring
Digital business analytics
How it works
Additional resources provided by Dynatrace
Dynatrace gives us a holistic view of our platforms all the way from our test environments through to production and provides a single view of the truth across the business.
Yasin Quareshy
Head of Cloud Operations, TUINew Relic
Overview
New Relic One is a SaaS-based observability platform with dynamic dashboards for consolidated performance views. The platform combines configuration monitoring and real-time health metrics for both technical and business analytics. With over 50 deep integrations with AWS, New Relic gives businesses an unobstructed view across organizational boundaries to quickly discover and resolve problems.
New Relic features include:
Data regions
Rapid cloud scalability
Customizable dashboards, alerts, and applications
AI-based analytics
How it works
Additional resources provided by New Relic
Implementation guide
We can see the AWS information we need in New Relic, and it involves very little setup. It's almost like New Relic is native to AWS.
Jeff Hobeck
Principal Architect, Fleet CompletePagerDuty
Overview
PagerDuty is a digital operations management platform that enables teams to mitigate customer-impacting events by turning signals into insight and action. PagerDuty integrates with AWS Control Tower to help teams collaborate efficiently, resolve disruptions quickly, and focus on continuous development and delivery. This allows organizations to innovate and scale their cloud environments with confidence, improving operations and increasing overall customer satisfaction.
PagerDuty features include:
Intelligent platform for real-time operations
Full incident context, real-time triaging, and personalized recommendations
Customer-centric, modular packaging streamlines workflows of any team size
On-call management with alerting and scheduling for fast response times
Support for over 370 tools to manage digital operations
How it works
Additional resources provided by PagerDuty
AWS EventBridge, combined with PagerDuty, helps us generate event-driven workflows in real time. When we detect an issue, PagerDuty generates an alert, triggering an AWS Lambda function to grab runbooks and post details back into PagerDuty. This helps us resolve issues faster and create the best experience for our customers.
Ed Kozlowski
Lead Software Engineer, Cox AutomotiveTrend Micro
Overview
Trend Micro Cloud One™ - Conformity provides continuous security, compliance, and governance in a SaaS platform. Designed to help you manage misconfigurations of cloud resources, Trend Micro Cloud One maps to the AWS Well-Architected Framework as well as leading compliance frameworks. Conformity helps your DevOps teams, cybersecurity, and compliance professionals build secure, ship fast, and run anywhere, with the assurance that your cloud infrastructure is configured and deployed securely.
Trend Micro Cloud One - Conformity features include:
Extensive coverage on AWS services with Conformity rules
600+ preconfigured rules
Actionable and easy to use remediation guides, plus auto remediation capabilities
Easy interoperability with key integrations like Slack®, ServiceNow®, JIRA®, PagerDuty®, and more
Near real-time alerting to reduce lag time and improve productivity
How it works
Additional resources provided by Trend Micro
Implementation guide
When it comes to data collection, analysis, and reporting, Conformity shaves off weeks of what used to be manual work to perform cloud reviews. It allows us to help more customers, without sacrificing quality.
Joe Henderson
General Manager, North America, Edrans