AWS Trusted Advisor
An automatic checkup of your AWS account with tips to save money and stay safe.
AWS Trusted Advisor inspects your AWS account and compares it with a list of best practices. Then it gives you recommendations: here you are paying for something you do not use, here a door is open that should be closed, here you are close to a limit.
Its checks are grouped into categories: cost optimization, performance, security, fault tolerance, service limits and operational excellence. Typical examples are a server that sits almost idle all month, a security group that lets anyone on the internet reach a database port, an S3 bucket with public permissions, or a root account without MFA. Each check shows green, yellow or red.
How much you see depends on your AWS support plan. With the free Basic plan you get the service limits checks and a handful of key security and fault tolerance checks. Paid support plans unlock the full list and the API, so the results can feed alerts or automation.
Keep in mind
- Checks cost, performance, security, fault tolerance, service limits and operational excellence.
- Each check is green, yellow or red, with a recommended action.
- Every account gets some checks for free; the full set needs a paid support plan.
- It recommends, it does not change anything by itself.