AWS Compute Analyzer

Analyzer: AWS Compute

The AWS Compute Analyzer provides critical insights into your compute infrastructure, including EC2, ECS, and their workloads, as well as spot instances. It serves as a pivotal tool for IT Ops and Sec Ops engineers by enhancing operational observability, compliance, and security. With this analyzer, engineers can efficiently monitor compute resources, identify vulnerabilities, and optimize resource usage. It streamlines decision-making processes, helps mitigate risks, and ensures adherence to compliance standards.

Sightlines and Widgets

EC2 Instance State

Significance: This sightline offers a comprehensive view of the state of EC2 instances across the environment. It helps Sec Ops engineers identify stopped or terminated instances and provides IT Ops engineers with a real-time snapshot of running resources to ensure efficient resource management.

Widgets:

• All EC2 Instances

• Running EC2 Instances

• Stopped EC2 Instances

• EC2 Instances State Distribution

• EC2 Terminate Instance Events

• EC2 Instances State Across Accounts Sankey

---

EC2 Instance Type

Significance: Focused on understanding the types of EC2 instances in use, this sightline allows engineers to track reserved, spot, and scheduled instances for cost optimization and operational planning.

Widgets:

• Spot EC2 Instances

• Scheduled EC2 Instances

• Reserved EC2 Instances

• EC2 Instances Family Type Distribution

---

EC2 Network Connectivity

Significance: This sightline highlights network connectivity aspects, including security group configurations and public versus private instance distributions. It assists Sec Ops engineers in identifying misconfigurations and IT Ops engineers in maintaining secure and efficient network setups.

Widgets:

• Default Security Groups Stat Card

• Security Groups Inbound Access Stat Card

• Security Groups Outbound Access Stat Card

• Security Groups Inbound RDP Access Stat Card

• Empty Default Security Groups Stat Card

• Public vs Private Instances Chart

• EC2 Network Events Chart

---

EC2 Instance Access

Significance: This sightline provides visibility into EC2 instance access configurations, such as IAM roles and key pairs. It supports engineers in identifying instances with exposed or unused access credentials, ensuring secure operations.

Widgets:

• EC2 Instances with IAM Roles Stat Card

• Public EC2 Instances

• EC2 Instances That Expose Nonpublic S3 Buckets Stat Card

• Public Instances with IAM Role

• Unused EC2 Key Pairs Stat Card

• EC2 Access Events Chart

---

EC2 Instance AMIs

Significance: Focused on AMI (Amazon Machine Image) management, this sightline helps engineers monitor attached and unattached AMIs to optimize storage and improve resource utilization.

Widgets:

• All AMIs Stat Card

• Attached AMIs Stat Card

• Unattached AMIs Stat Card

• EC2 AMIs Platform Distribution Chart

---

EC2 Instance Storage

Significance: This sightline provides insights into EC2 storage usage, highlighting unencrypted and unused volumes. It supports engineers in optimizing storage and enhancing security by identifying non-compliant volumes.

Widgets:

• All Volumes Stat Card

• Unused Volumes Stat Card

• Unencrypted Volumes Stat Card

• Instances with CloudWatch Access Stat Card

• EC2 Storage Events

---

ECS Cluster

Significance: This sightline focuses on ECS cluster metrics, providing engineers with a detailed view of services, tasks, and regional distributions for efficient workload management and scaling.

Widgets:

• All ECS Clusters Stat Card

• All ECS Clusters Services Stat Card

• All ECS Clusters Tasks Stat Card

• Compute ECS Region Distribution

• Compute ECS Status Distribution

---

Lambda Functions

Significance: This sightline highlights the usage and runtime of Lambda functions, helping engineers identify errors and optimize functions for better performance.

Widgets:

• All Lambda Functions Stat Card

• Lambda Functions Error Count Stat Card

• Lambda Functions Runtime Distribution Chart

---

Elastic IP

Significance: This sightline monitors the usage of Elastic IPs, distinguishing between attached and detached IPs. It ensures efficient utilization and cost management.

Widgets:

• Detached IPs Stat Card

• Attached IPs Stat Card

• Compute Elastic IP Domain Distribution

---

EBS Snapshot

Significance: Focused on snapshot management, this sightline helps engineers identify privately shared, public, and unencrypted snapshots to maintain security and compliance.

Widgets:

• Privately Shared EBS Snapshots Stat Card

• Public EBS Snapshots Stat Card

• Unencrypted EBS Snapshots Stat Card

• EBS Snapshot Volume Size Bar Chart

---

Insight Feed Alerts

Public EC2 Instances Exposing Non-public S3 Buckets Count

Significance: This alert identifies public EC2 instances exposing non-public S3 buckets, a critical security risk. It enables Sec Ops engineers to quickly mitigate potential data breaches and ensures IT Ops engineers maintain strict access control and compliance.