AWS Cloud Operations & Migrations Blog

Visualizing Resources with Workload Discovery on AWS

Operations Teams (Ops Teams) across enterprises typically rely on documented architecture diagrams to understand the dependencies of various workloads deployed on AWS. As enterprises continue to deploy large-scale multi-tiered workloads, it can become challenging for the Ops Teams to track the ever changing relationships between the deployed resources, and the documents can’t keep up with […]

Scaling Landing Zone with AWS Control Towers

A landing zone (LZ) is a well-architected, multi-account AWS environment that is scalable and secure. This is a starting point from which your organizations can quickly launch and deploy workloads in the secured infrastructure environment. A well-defined LZ provides a set of guardrails and baselines with multi-account architecture, identity and access management, control, data security, […]

Automating centralized package management in AWS using AWS Systems Manager Distributor and AWS Systems Manager State Manager

This blog post was jointly contributed by Kanishk Mahajan, AWS and Dominic Medsker, Moody’s Customers routinely leverage 3rd party agent-based packages and vulnerability management tools, such as CrowdStrike, TrendMicro, and Tenable, to securetheir AWS environments. AWS supports distribution of third-party agents with AWS Systems Manager Distributor (Distributor). Distributor lets you package your own software or […]

Scale Operational Readiness Reviews with AWS Well-Architected Tool

In this blog post, learn how to scale out an operational readiness review (ORR) in your organization by using the AWS Well-Architected Tool (AWS WA Tool) and its Custom Lens capability. The AWS WA Tool ‘Custom Lens’ feature was launched in Nov 2021 and makes it a single place for you to review and measure best practices across your […]

Build EC2 Image Builder container images locally

EC2 Image Builder is a fully-managed AWS service that simplifies the creation, management, and deployment of golden server and container images. The images are built using an automation pipeline that is customizable for customers, enabling them to create images that are pre-installed and pre-configured with software and packages to meet specific IT requirements. The service […]

How to import migrated Amazon EC2 instances into infrastructure code

Modeling Infrastructure as Code (IaC) enables you to automate the lifecycle of AWS resources. However, the timing for IaC adoption can vary. AWS customers often move quickly in the beginning by performing block-level replication of their servers to the cloud. This is suitable when hundreds or thousands of servers need to exit their data center […]

AWS Service Catalog Account Factory-Enhanced

Many enterprise customers who use AWS Control Tower to create accounts want an uncomplicated way to extend the next steps in the account creation process. These next steps cover common business use cases, including creating networks, security profiles, governance, and compliance. Executing these processes for every new account created manually is cumbersome and challenging to […]

Title of blog on box image

What’s new in AWS Observability at re:Invent 2022

Kick off your AWS re:Invent 2022 week with a round-up of the AWS Observability launches across Amazon CloudWatch, AWS X-Ray, Amazon Managed Grafana, and Amazon Managed Service for Prometheus. From understanding impact of internet issues on your application performance and availability with CloudWatch, to VPC support and Prometheus alerting in Managed Grafana, read on to […]

Announcing AWS CloudTrail Lake integration with AWS Config

Organizations managing cloud infrastructure in AWS need effective mechanisms to audit operations in their AWS accounts for security and compliance. Early this year we announced the availability of AWS CloudTrail Lake a managed data lake that lets organizations aggregate, immutably store, and query events recorded by CloudTrail for auditing, security investigation, and operational troubleshooting. CloudTrail […]

Announcing Prometheus Alertmanager rules in Amazon Managed Grafana

Today, we are announcing Amazon Managed Grafana’s new alerting feature that allows customers to gain visibility into their Prometheus Alertmanager alerts from their Grafana workspace. Customers can continue to use classic Grafana Alerting in their Amazon Managed Grafana workspaces if that experience better fits their needs. Customers using the Amazon Managed Service for Prometheus workspaces to […]