---
title: AWS Trusted Advisor
description: An online tool that offers real-time guidance on AWS resource management.
breadcrumbs: Docs > Integrations > AWS Trusted Advisor
---

# AWS Trusted Advisor

## Overview{% #overview %}

AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices.

Enable this integration to see all your Trusted Advisor metrics in Datadog.

**Note**: This integration only works for AWS customers with a Business or Enterprise support plan.

## Setup{% #setup %}

### Installation{% #installation %}

If you haven't already, set up the [Amazon Web Services integration](https://docs.datadoghq.com/integrations/amazon_web_services.md) first.

### Metric collection{% #metric-collection %}

**Note**: Starting **June 1, 2026**, the Trusted Advisor integration will use the dedicated AWS Trusted Advisor APIs instead of the AWS Support APIs. Grant the IAM permissions in step 1 before that date. After the migration, `support:describe*` and `support:refresh*` permissions are no longer required.

1. In the IAM Console, add the following permissions to your policy document:
   - **Until June 1, 2026:** `support:describe*`, `support:refresh*` — see [Actions, resources, and condition keys for AWS Support](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupport.html).
   - **Starting June 1, 2026:** `trustedadvisor:ListRecommendations`, `trustedadvisor:ListRecommendationResources` — see [Actions, resources, and condition keys for AWS Trusted Advisor](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awstrustedadvisor.html).
1. In the [AWS integration page](https://app.datadoghq.com/integrations/amazon-web-services), ensure that `Trusted Advisor` is enabled under the `Metric Collection` tab.
1. Install the [Datadog - AWS Trusted Advisor integration](https://app.datadoghq.com/integrations/amazon-trusted-advisor).

### Log collection{% #log-collection %}

#### Enable logging{% #enable-logging %}

Configure AWS Trusted Advisor to send logs either to a S3 bucket or to CloudWatch.

**Note**: If you log to a S3 bucket, make sure that `amazon_trusted_advisor` is set as *Target prefix*.

#### Send logs to Datadog{% #send-logs-to-datadog %}

1. If you haven't already, set up the [Datadog Forwarder Lambda function](https://docs.datadoghq.com/logs/guide/forwarder.md).

1. Once the Lambda function is installed, manually add a trigger on the S3 bucket or CloudWatch log group that contains your AWS Trusted Advisor logs in the AWS console:

   - [Add a manual trigger on the S3 bucket](https://docs.datadoghq.com/logs/guide/send-aws-services-logs-with-the-datadog-lambda-function.md#collecting-logs-from-s3-buckets)
   - [Add a manual trigger on the CloudWatch Log Group](https://docs.datadoghq.com/logs/guide/send-aws-services-logs-with-the-datadog-lambda-function.md#collecting-logs-from-cloudwatch-log-group)

## Data Collected{% #data-collected %}

### Metrics{% #metrics %}

|  |
|  |
| **aws.trustedadvisor.red\_resources**(gauge)        | The number of Trusted Advisor resources in a red (ERROR) state.*Shown as resource*   |
| **aws.trustedadvisor.service\_limit\_usage**(gauge) | The percentage of resource utilization against a service limit.*Shown as percent*    |
| **aws.trustedadvisor.yellow\_resources**(gauge)     | The number of Trusted Advisor resources in a yellow (WARN) state.*Shown as resource* |
| **aws.advisor.service\_limit.max**(gauge)           | Amazon Trusted Advisor service limit max                                             |
| **aws.advisor.service\_limit.usage**(gauge)         | Amazon Trusted Advisor service limit usage                                           |
| **aws.advisor.service\_limit.usage\_ratio**(gauge)  | Amazon Trusted Advisor service limit usage ratio                                     |

### Events{% #events %}

The AWS Trusted Advisor integration does not include any events.

### Service Checks{% #service-checks %}

The AWS Trusted Advisor integration does not include any service checks.

## Dashboard{% #dashboard %}

To populate data on your AWS Trusted Advisor integration dashboard:

1. Configure the IAM permissions as described in the Metric collection section.
1. Have an upgraded AWS support plan.

The Datadog Trusted Advisor Dashboard needs access to the full set of [AWS Trusted Advisor checks](https://aws.amazon.com/premiumsupport/trustedadvisor). AWS makes these only available for upgraded AWS support plans. Make sure that your AWS plan includes full access.

## Troubleshooting{% #troubleshooting %}

Need help? Contact [Datadog support](https://docs.datadoghq.com/help/).

## Further Reading{% #further-reading %}

- [Monitor your AWS Trusted Advisor Service Limit Check with Datadog](https://www.datadoghq.com/blog/monitor-aws-trusted-advisor/)