AWS Trusted Advisor

Overview

AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices.

Enable this integration to see all your Trusted Advisor metrics in Datadog.

Note: This integration only works for AWS customers with a Business or Enterprise support plan.

Setup

Installation

If you haven’t already, set up the Amazon Web Services integration first.

Metric collection

  1. In the IAM Console, add support:describe* and support:refresh* as an action in the policy document field. For more information about the AWS Support API, see Actions, resources, and condition keys for AWS Support.
  2. In the AWS integration page, ensure that Trusted Advisor is enabled under the Metric Collection tab.
  3. Install the Datadog - AWS Trusted Advisor integration.

Log collection

Enable logging

Configure AWS Trusted Advisor to send logs either to a S3 bucket or to CloudWatch.

Note: If you log to a S3 bucket, make sure that amazon_trusted_advisor is set as Target prefix.

Send logs to Datadog

  1. If you haven’t already, set up the Datadog Forwarder Lambda function.

  2. Once the Lambda function is installed, manually add a trigger on the S3 bucket or CloudWatch log group that contains your AWS Trusted Advisor logs in the AWS console:

Data Collected

Metrics

aws.advisor.service_limit.max
(gauge)		Amazon Trusted Advisor service limit max
aws.advisor.service_limit.usage
(gauge)		Amazon Trusted Advisor service limit usage
aws.advisor.service_limit.usage_ratio
(gauge)		Amazon Trusted Advisor service limit usage ratio
aws.trustedadvisor.red_resources
(gauge)		The number of Trusted Advisor resources in a red (ERROR) state.
Shown as resource
aws.trustedadvisor.service_limit_usage
(gauge)		The percentage of resource utilization against a service limit.
Shown as percent
aws.trustedadvisor.yellow_resources
(gauge)		The number of Trusted Advisor resources in a yellow (WARN) state.
Shown as resource

Events

The AWS Trusted Advisor integration does not include any events.

Service Checks

The AWS Trusted Advisor integration does not include any service checks.

Dashboard

To populate data on your AWS Trusted Advisor integration dashboard:

  1. Configure support permissions.
    • In the IAM Console, add support:describe* and support: refresh* as an action in the policy document text box.
  2. Have an upgraded AWS support plan.

The Datadog Trusted Advisor Dashboard needs access to the full set of AWS Trusted Advisor checks. AWS makes these only available for upgraded AWS support plans. Make sure that your AWS plan includes full access.

Troubleshooting

Need help? Contact Datadog support.

Further Reading

Additional helpful documentation, links, and articles:

Monitor your AWS Trusted Advisor Service Limit Checks with DatadogBLOG more more