Hi to you and welcome back.
Now, in today's video, we will be discussing about the basics of trusted advisor service.
So at a high level, what have you heard of this?
Trusted Advisor analyzes your identity environment and provides a best practice recommendation in the
following five categories.
So the five categories are cost optimization, performance security, fault tolerance and service limits,
and analyzing IT accounts based on the rules that are part of each one of these categories.
And depending upon the overall rule matching, you will get the appropriate recommendation.
So let me quickly show you this.
So from the console, let's open up the trusted advisor service.
Now within the Di's voodoo area, you will see that there are certain actions that that trusted advisor
is recommending.
First one is a multi-factor authentication on root account.
So if I open this up, it basically gives us details on what this does and also gives you the recommended
action, basically what you need to do so that this alert goes away.
So this is a good alert.
Second important alert is related to security group.
So if I'll quickly open this up.
So what this will do, it will basically give you a list of security group where you have unrestricted
access or everyone is allowed to connect.
So let me quickly show.
So let's open up one of the security groups here.
So if you'll see over here, this security group is in the AP South one region, which is the Mumbai
region.
It is giving you the security group I.D. and also showing you the port.
So if I'll open this up, let's look into the in modules.
In the in module, you see Port 22 is allowed from 0000.
So this is something that you should not do in production environment.
And this is one of the good things that that security group is basically been alerted for by the trusted
databases service.
So this is the second thing, and that is one more alert related to S3 bucket permissions.
Now, one more thing you'll see is basically it states that upgrade your ID support plan to get all
that going to senior advisor.
So basically, as we're discussing, there are five major categories based on which you will get the
checks here.
So if you look into this security group, Kate, so this security group comes under the category of
security.
It does not really come in the category of cost optimization.
So each category has a number of rules that are available and not all of these rules are enable for
you.
For example, on the left hand side, you have multiple categories.
Let's open up one among them.
Let's open up the security category, Audie.
So within here, you will see that there are certain rules order which at date certain rules are passing,
and there are many other rules like AM password policy, RDR, security group accessories, cloud pre
logging, ILB, security group, etc..
So you see the number of rules that are not really being evaluated are huge.
And this is just one let's open up the cost optimization as well.
So, Virginia, it basically shows you the list of easy do instances that has a lower amount of utilization.
So if you'll see, there are a number of rules that are available and none of these rules are currently
enabled in this specific account.
So it is important to note that if you have a account, let's say, if you have a business account,
that basically means you have a business support plan or a enterprise support plan.
Then these checks that are not highlighted here will be enabled for you.
But if you do not really have a business or enterprise support plan, these checks would not be enabled
for you.
So if I basically click on upgrade over here, he basically asks me to choose a specific plan.
So currently are in the basic plan where support is not really provided and even in the trusted advisor,
it's this access to seven core advisor checks and the same is for the developer plan.
Now if you look into the business plan and the enterprise plan, access to all the true state advisor
checks are being allowed.
So if you want all of them to be enabled, you need to either the business support plan or the enterprise
support plan or whatever.
And again, so that there are no surprises.
These are not free plans.
You will have to pay for it.
So if you do see the business support plan basically starts at 200 USD per month and enterprise basically
starts at 15,000 per month.
So this is one important thing that needs to be noted.
So just to relate, I have also added a table with all of the categories of cost optimization, performance,
security, fault tolerance and service limits.
So these are basically the categories based on which the trusted advisor will alert you or you know,
from the name itself within identify what each one of these would do.
Cost optimization.
Like, for example, we had seen it basically gives you the list of low utilization, easy to instances
or idle load balances.
So basically a recommendation that can allow you to save some money.
Then you have performance which allows you to improve upon the speed and responsiveness of your application.
So if you look into the performance, it basically gives you the EBS provision, IOPS related alerts,
high utilization, Amazon EC2 instance, related alerts, alerts related to what utilize EBS and magnetic
volume.
So in case if your application is slowing.
On due to ebbs.
This alert will help you to upgrade your desk.
Then you have security related alert.
This is something that we have seen.
Then you have the Fort Collins related alert.
So again, if you look into the fault tolerance audio, so one of the important one is take the distribution
of your EC2 instances across availability zone in a region.
If all your easy to are in one availability zone and if that one availability zone goes down, then
the entire production is also goes down.
So this is where the fault always comes in the picture.
And the last one is service limits, which basically takes the usage of your account and whether there
are limits that are being approved.
So if I look into the service limits already, it basically shows you the limits related to the services
audio, for example.
Let's go, big Don.
If you look into the BBC Internet gateways, audio currently, all of them are within limit.
And if you will see the limit amount is five and the current usage is one.
So generally, whenever you try to create a huge number of Internet gateways suddenly and if the number
of Internet gateway is exceeding the limited amount, you will not be able to do that.
You will have to raise a request to increase your limit.
Great.
So this is the high level.
What have you about the trusted advisor service?