AWS Trusted Advisor Explorer

This solution includes an AWS CloudFormation template that creates a scheduler block, an extract account information block, an extract trusted advisor & tag data block, and a Trusted Advisor Recommendations block.

The scheduler block is an Amazon CloudWatch Events rule that triggers the solution based on a schedule defined by user.

The extract account information block contains an AWS Lambda function that extracts the list of accounts from the existing organization in the account or from a CSV file input.

The extract Trusted Advisor & tag data block contains four AWS Step Functions. These four Step Functions are composed of five AWS Lambda functions that work in parallel to extract AWS Trusted Advisor cost recommendations and tag data from all of the member accounts and store them in an Amazon Simple Storage Service (Amazon S3) bucket.

The Trusted Advisor Recommendations data lake block contains Amazon S3, AWS Glue crawlers, Amazon Athena, AWS Lambda, and CloudWatch Events rules. The workflow is triggered by a time-based CloudWatch Events rule on a schedule defined by the user.

The template deploys two Amazon S3 buckets, one for storing the raw Trusted Advisor cost recommendations and tag data, and the other for access logging. It also deploys two Glue crawlers that crawl the raw data from the S3 bucket to create tables in an Amazon Athena database. When the Glue crawler finishes, another event-based CloudWatch Events rule triggers which invokes an AWS Lambda function to create the required Amazon Athena views.

The solution leverages AWS Trusted Advisor cost optimization recommendations and AWS Resource Groups tag editor data to build a data lake that can be queried using Amazon Athena and visualized using Amazon QuickSight or any other visualization platform.