Follow Best Practices with AWS Trusted Advisor

Lab Steps

lock
Logging in to the Amazon Web Services Console
lock
Understanding AWS Trusted Advisor
lock
Following Security Group Best Practices
lock
Following Identity and Access Management Best Practices
lock
Enabling Multi-Factor Authentication on Your AWS Account
lock
Following Snapshot Best Practices
lock
Following Service Limits Best Practices

The hands-on lab is part of these learning paths

Technical Essentials of AWS
course-steps
14
certification
1
lab-steps
11
description
2
DevOps Engineer – Professional Certification Preparation for AWS
course-steps
35
certification
6
lab-steps
18
quiz-steps
2
description
3
SysOps Administrator – Associate Certification Preparation for AWS
course-steps
32
certification
5
lab-steps
30
quiz-steps
4
description
5
Security - Specialty Certification Preparation for AWS
course-steps
23
certification
2
lab-steps
12
quiz-steps
4
more_horizSee 1 more

Ready for the real environment experience?

DifficultyBeginner
Time Limit1h 10m
Students722
Ratings
4.2/5
starstarstarstarstar-border

Description

AWS Trusted Advisor provides a suite of features for you to help proactively monitor your AWS resources and make customized recommendations. The Trusted Advisor service advises you on best practices in four categories: cost optimization, performance, security, and fault tolerance. In this Lab, you will use some of the security and performance checks to implement best practices in AWS.

Lab Objectives

Upon completion of this lab you will be able to:

  • Audit your AWS environment using AWS Trusted Advisor
  • Correct security group, IAM, and EBS snapshot security issues
  • Mitigate performance issues identified by AWS Trusted Advisor

Lab Prerequisites

You should be familiar with the following:

  • EC2 basics including volumes and snapshots
  • VPC basics including security groups and internet gateways

Lab Environment

Before completing the lab instructions the environment will look as follows:

After completing the lab instructions the environment will look as follows:

Updates

June 3rd, 2020 - Addressed an issue with IAM and refresh checks

July 2nd, 2019 - Refactored part of the provisioning script to improve Lab maintainability

April 15th, 2019 - Improved instructions to make it more clear that EBS snapshot check may not detect the EBS public snapshot because that check runs on its own schedule determined by AWS

February 5th, 2019 - Updated the instructions and screenshots to match the latest AWS Trusted Advisor experience 

January 10th, 2019 - Added a validation Lab Step to check the work you perform in the Lab

About the Author
Students67751
Labs116
Courses11
Learning paths15

Logan has been involved in software development and research since 2007 and has been in the cloud since 2012. He is an AWS Certified DevOps Engineer - Professional, AWS Certified Solutions Architect - Professional, Microsoft Certified Azure Solutions Architect Expert, MCSE: Cloud Platform and Infrastructure, Google Cloud Certified Associate Cloud Engineer, Certified Kubernetes Administrator (CKA), Certified Kubernetes Application Developer (CKAD), Linux Foundation Certified System Administrator (LFCS), and Certified OpenStack Administrator (COA). He earned his Ph.D. studying design automation and enjoys all things tech.