Tag: AWS Governance

Three stages to Managing and Governing with AWS:

1. Enable :- Automate set-up of a baseline environment for running secure and scalable workloads in AWS based on best practices using AWS Control Tower. We can set up granular control over AWS accounts using AWS organization. Key Services are
   1. AWS Control Tower.
   2. AWS Organizations.
   3. AWS Well-Architected Tool.
   4. AWS Budgets.
   5. AWS License Manager.
2. Provision :- Automate resource provisioning using AWS cloud formation’s infrastructure-as-code templates. Key Services are
   1. AWS CloudFormation
   2. AWS Service Catalog
   3. AWS OpsWorks
   4. AWS Marketplace
3. Operate :- We can use AWS services for end to end IT lifecycle management. First, improve visibility into resources using Amazon CloudWatch to monitor AWS resources, applications and services. Second, improve compliance auditing and security analysis using AWS CloudTrail to record user activity. Third, we can evaluate and monitor the compliance posture of your AWS resource configurations, as well as remediate noncompliant resources, using AWS Config.  Additionally, when it comes to managing operational tasks, instead of using different toolsets in hybrid cloud environments, we can use AWS Systems Manager to centralize tasks in an “operations cockpit” using a common toolset. Finally, It is recommended to use AWS Trusted Advisor for recommendations to reduce underutilized resources and save costs, as well as improve environment’s security and fault tolerance. Key Services are:
   1. AWS CloudWatch
   2. AWS CloudTrail
   3. AWS Config
   4. AWS System Manager
   5. AWS Trust Advisor
   6. AWS Cost and Usage report
   7. AWS Cost Explorer