Operational intelligence

In a cloud environment, organizations need in-depth visibility into every resource across multiple accounts and Regions. Operational intelligence software solutions can help AWS Control Tower administrators automate tool integration, enabling complete visibility and insights in real-time.
These are just a few examples of operational intelligence solutions. Scroll down or use the drop-down menu to learn more about each solution.
Choose a solution
  • Choose a solution
  • Tigera
  • Sysdig
  • SUSE
  • CloudGuard
  • Cutover
  • Datadog
  • Dynatrace
  • New Relic
  • PagerDuty
  • Trend Micro


Calico Cloud is a pay-as-you-go security and observability SaaS platform for containers, Kubernetes, and cloud. It deploys workload access controls, enforces consistent security policies, ensures continuous compliance, provides end-to-end live observability, and troubleshoots applications across multi-cluster and multi-cloud Kubernetes environments. Calico Cloud scales automatically with managed clusters to ensure security, continuous compliance, and uninterrupted, real-time observability.

Calico Cloud features include:

  • Workload access controls
  • Enterprise security and compliance
  • Observability and troubleshooting
  • Unified control: multi-cluster management
  • Support for multiple data planes – eBPF, Linux, Windows

How it works

Additional resources provided by Tigera

Cloudify needed to bolster its security with individualized policies for every container cluster during its migration from virtual machines (VMs) to a serverless infrastructure. After investigating several options, Cloudify chose Calico as the best solution for container networking and security, workload access controls, and micro-segmentation. As a result, Cloudify scaled to sixty customer deployments per month, streamlined user experience, and reduced security controls and policies implementation from days to minutes.


Sysdig Secure DevOps Platform helps teams secure the build, while detecting and responding to threats. It also continuously manages configurations and compliance, and monitors containers, Kubernetes, and cloud services. Sysdig is a Software-as-a-Service (SaaS) platform that provides deep visibility across workloads and cloud infrastructure.
Sysdig features include:
  • Cloud Security
  • Kubernetes Security
  • Image Scanning
  • Runtime Security
  • Continuous Compliance
  • Monitoring & Troubleshooting
  • Incident Response & Forensics

How it works

Additional resources provided by Sysdig

To deliver Kubernetes logging capability to their customers, LogDNA needed to transition its entire stack to run as microservices on Kubernetes. Sysdig’s minimal maintenance, quick insights, fast ramp with dashboard and alert creation across all environments, and audit trails, made them an idea choice. With Sysdig, LogDNA improved their customer experience by reducing the time to resolve performance issues and provided improved efficiency for compliance and audit processes. They were also able to catch customer-impacting events 98% of the time.
quotes icon

There is no better choice than Sysdig to meet our monitoring and security needs. Sysdig reports on our entire AWS infrastructure, including infrastructure and application events.

Ryan Staatz, Systems Architect, LogDNA


SUSE Linux Enterprise for SAP Applications is the number-one Linux platform for SAP in a physical, virtualized, private or public cloud environment. It is endorsed by SAP and preferred by more than 30,000 customers because it reduces risk from service outages, fosters innovation with maintenance automation, and deploys new services faster, on prem and in the cloud.
SUSE Linux Enterprise for SAP Applications features include:
  • Built-in business continuity - SUSE Linux Enterprise High Availability Extension  delivers multiple high-availability / disaster recovery configuration options, integrated with automated data recovery for SAP HANA, and live Linux kernel patching
  • Performance optimization
  • Additional security to secure SAP HANA in memory systems with a built in firewall and protect data in remote data centers with enhanced encryption management.
  • Rapid data recovery
  • Fast SAP application deployment
  • Advanced monitoring - Proactively identify system issues before failures with server and SAP application-specific operational data collection and export for visualization.
  • Integrated 24x7 support

How it works

Additional resources provided by SUSE

Lemongrass customers run extensive SAP landscapes, consisting of countless production workloads, as well as non-production workloads that need to be maintained even when they’re not in use. They turned to SUSE because their operating system is commonly used to develop SAP solutions and is certified to run mission-critical SAP workloads, including memory-intensive SAP HANA applications. SUSE allows customers the ability to operate and scale their SAP systems in a repeatable and predictable manner. Using SUSE Manager, customers can manage and update their SAP HANA resources while incurring near-zero downtime. The implementation to SUSE allowed customers to Spin up specific SAP systems in a self-service, on-demand manner with daily cost transparency, recover SAP data and systems builds from a specific point in time via continuous backups, work off of the most recent and most accurate copies of production data, automate business operations and thus, maintain and patch systems without having to shut them down.
quotes icon

SUSE is the platform of choice that we migrate customers onto, especially when you look at in-memory applications, such as SAP HANA.

Ben Lingwood, CTO, Lemongrass


CloudGuard is a comprehensive cloud native security platform for visibility, workload protection, and posture management of cloud workloads and services.

 CloudGuard features include:

  • Cloud asset visualization, including network topology, firewalls and more
  • Comprehensive posture management with automated continuous compliance to enforce regulatory requirements
  • CloudBots with auto-remediation solutions for AWS
  • Continuous monitoring and automation reversion of unauthorized modifications
  • Privileged identity protection featuring just-in-time privilege elevation with out-of-band authorization

How it works

Additional resources provided by CloudGuard


When deploying a multi-cloud environment, you need to have a consistent tool that plays across all the platforms. Using the cloud-agnostic CloudGuard Dome9 service, I only need to train an individual on one set of tools and he can manage our total cloud environment very effectively.

quotes icon

Speed is a key benefit in secure DevOps, but teams often think that there’s a tradeoff between speed and security. That’s not always the case. With CloudGuard Dome9’s Dynamic Access Leases, we were able to provide just-in-time access for our DevOps teams to allow for rapid yet secure access which was a major enabler for our IT operations.

Robert Berger, CTO & SVP Engineering, Omnyway


Cutover is a work orchestration and observability platform that allows teams to plan, orchestrate, and analyze complex workflows. It integrates with AWS Control Tower to accelerate your migration, drive effective governance, reduce risk, and ensure standardization. Cutover’s automation runbooks work with existing toolsets to allow teams to achieve full visibility, control, and streamlined communications across their multi-account AWS environments.

Cutover features include:

  • Live visualization for successful coordination, optimization, and de-risking
  • Real-time dashboards for live visibility and progress-sharing
  • Automation runbooks with integrations for 20+ tools
  • Advanced analytics for nearly continuous improvement and audit
  • Audit trail to satisfy regulatory and compliance requirements
  • Imbedded communications sequenced alongside tasks

How it works

Additional resources provided by Cutover


A multinational bank needed a work orchestration and observability solution to support their major application transformation to the cloud. Cutover created an automatic system of record from design to completion, providing a single source of truth for evaluation and improvement. They also enabled the bank to start testing and rehearsals with increased transparency through real-time dashboards. This resulted in savings of considerable time and money while making it easier to remediate errors and improve risk management.

quotes icon

Cutover...continues to add huge value...it’s likely to be a new paradigm for technology and the way we work!

Anonymized User, Chief Information Officer (CIO), Multinational Bank


Datadog Pro is a unified monitoring platform with infrastructure monitoring, application performance monitoring, log management, user experience (UX) monitoring, and more. By bringing together data from distributed sources, it provides a consolidated view across multi-account AWS environments to enhance your cloud health, work, and performance.

Datadog Pro features include:

  • Infrastructure, network, security, and UX monitoring
  • Application performance management (APM) visibility into modern applications
  • Log management
  • 80+ integrations with AWS products including AWS Control Tower
  • AWS Control Tower adds Datadog monitoring to any new AWS accounts you provision

How it works

Additional resources provided by Datadog


TrueCar, a digital automotive marketplace, needed a solution to gain visibility and reduce the amount of time engineers dedicated to monitoring and tracking. Siloed monitoring tools led to high mean-time-to-resolution (MTTR) and prevented their engineers from innovating. After implementing Datadog, TrueCar was able to monitor all environments and went from developing a feature in months to just one day.  

quotes icon

With the explosion in the number of environments, comes the need to actually watch everything that is going on. Datadog provides the ability to monitor everything from a single location with relatively simple configuration.

Eric Lee, Site Reliability Engineer, TrueCar


Dynatrace provides software intelligence to simplify cloud complexity. With automatic and intelligent observability at scale, it delivers precise answers about the performance of cloud platform environments. It seamlessly integrates with AWS Control Tower and securely governs AWS Accounts as soon as they are created. A smart baselining capability adapts dynamically and monitors the performance of your multi-account environments in real-time.

Dynatrace’s automatic and intelligent observability platform includes:

  • Application performance monitoring
  • Infrastructure monitoring
  • Artificial intelligence for IT operations (AIOps)
  • Digital experience monitoring
  • Digital business analytics

How it works

Additional resources provided by Dynatrace


Challenged with a fragmented IT global landscape, TUI embarked on a strategy to consolidate IT environments and move to AWS. Dynatrace's automatic and intelligent observability helped simplify TUI's operations. By adopting Dynatrace, TUI accelerated their cloud migration while reducing the time-solving problems and recovering services by 50 percent.

quotes icon

Dynatrace gives us a holistic view of our platforms all the way from our test environments through to production and provides a single view of the truth across the business. 

Yasin Quareshy, Head of Cloud Operations, TUI

New Relic

New Relic One is a SaaS-based observability platform with dynamic dashboards for consolidated performance views. The platform combines configuration monitoring and real-time health metrics for both technical and business analytics. With over 50 deep integrations with AWS, New Relic gives businesses an unobstructed view across organizational boundaries to quickly discover and resolve problems.

New Relic features include:

  • Data regions
  • Rapid cloud scalability
  • Customizable dashboards, alerts, and applications
  • AI-based analytics

How it works

Additional resources provided by New Relic

Fleet Complete

As the fastest-growing telematics provider in the world, Fleet Complete provides transformative solutions to any fleet-owning business–big or small. Needing an environment that could scale with their customer’s priorities, the company turned to New Relic to help support, manage, and optimize their AWS migration. Within 12 months, Fleet Complete accelerated deployments from once a month to once a week and gained complete visibility into its all-important data ingestion pipeline.

quotes icon

We can see the AWS information we need in New Relic, and it involves very little setup. It's almost like New Relic is native to AWS. 

Jeff Hobeck, Principal Architect, Fleet Complete


PagerDuty is a digital operations management platform that enables teams to mitigate customer-impacting events by turning signals into insight and action. PagerDuty integrates with AWS Control Tower to help teams collaborate efficiently, resolve disruptions quickly, and focus on continuous development and delivery. This allows organizations to innovate and scale their cloud environments with confidence, improving operations and increasing overall customer satisfaction.

PagerDuty features include:

  • Intelligent platform for real-time operations
  • Full incident context, real-time triaging, and personalized recommendations
  • Customer-centric, modular packaging streamlines workflows of any team size
  • On-call management with alerting and scheduling for fast response times
  • Support for over 370 tools to manage digital operations

How it works

Additional resources provided by PagerDuty

Cox Automotive

Cox Automotive needed to improve its application quality, increase productivity, and achieve less downtime. PagerDuty enabled Cox Automotive to mitigate business disruptions by providing more visibility to all its teams, leading to increased customer satisfaction. With PagerDuty, Cox Automotive reduced downtime by 75 percent, increased mean-time-to-resolution (MTTR) by 56 percent, and decreased incident count by 23 percent.

quotes icon
AWS EventBridge, combined with PagerDuty, helps us generate event-driven workflows in real time. When we detect an issue, PagerDuty generates an alert, triggering an AWS Lambda function to grab runbooks and post details back into PagerDuty. This helps us resolve issues faster and create the best experience for our customers.
     Ed Kozlowski, Lead Software Engineer, Cox Automotive

Trend Micro

Trend Micro Cloud One™ - Conformity provides continuous security, compliance, and governance in a SaaS platform. Designed to help you manage misconfigurations of cloud resources, Trend Micro Cloud One maps to the AWS Well-Architected Framework as well as leading compliance frameworks. Conformity helps your DevOps teams, cybersecurity, and compliance professionals build secure, ship fast, and run anywhere, with the assurance that your cloud infrastructure is configured and deployed securely.

Trend Micro Cloud One - Conformity features include:

  • Extensive coverage on AWS services with Conformity rules
  • 600+ preconfigured rules
  • Actionable and easy to use remediation guides, plus auto remediation capabilities
  • Easy interoperability with key integrations like Slack®, ServiceNow®, JIRA®, PagerDuty®, and more
  • Near real-time alerting to reduce lag time and improve productivity

How it works

Additional resources provided by Trend Micro


As one of the first Amazon Web Services (AWS) partners to focus solely on cloud consulting, Edrans is an expert at helping its customers succeed. Working with fast-moving and game-changing technology, Edrans' customers need to keep up with changing security needs and regulatory requirements. They rely on Edrans'  AWS capabilities to help them meet those requirements. Edrans partners with Trend Micro to ensure its customers meet security and compliance standards as they adopt, optimize, and innovate on AWS.

quotes icon
When it comes to data collection, analysis, and reporting, Conformity shaves off weeks of what used to be manual work to perform cloud reviews. It allows us to help more customers, without sacrificing quality.
     Joe Henderson, General Manager, North America, Edrans