A SysOps administrator wants to automate the remediation of underutilized Amazon EBS volumes flagged by AWS Trusted Advisor to optimize costs. The administrator wants to configure a rule that detects when the 'Underutilized Amazon EBS Volumes' check status changes to a warning or error state and automatically triggers a process to clean up these volumes. Which configuration will meet these requirements with the least administrative effort?
- Configure an Amazon EventBridge rule with the event source set to aws.trustedadvisor and the detail-type set to Trusted Advisor Check Item Refresh Notification. Create a pattern matching the Underutilized Amazon EBS Volumes check and a status of WARN or ERROR. Set the rule target to an AWS Systems Manager Automation document that deletes the flagged volumes.Answer
- BCreate a custom AWS Config rule to monitor the attachment status of all EBS volumes. Configure an AWS Config remediation action pointing to a Systems Manager Automation document to delete unattached volumes, because Trusted Advisor checks cannot trigger EventBridge rules without an active AWS CloudTrail trail.
- CCreate an AWS Budget with an alert threshold set to 100% of forecasted monthly EBS spending. Configure an AWS Budget action to trigger a Systems Manager Automation document that scans the account for underutilized EBS volumes and deletes them when the budget threshold is exceeded.
- DEnable cost allocation tags on all EBS volumes and configure an EventBridge rule with the event source set to aws.billing. Configure the rule to trigger an AWS Lambda function that queries the AWS Billing Console for low utilization tags and terminates the associated EBS volumes.
Answer
Configure an Amazon EventBridge rule with the event source set to aws.trustedadvisor and the detail-type set to Trusted Advisor Check Item Refresh Notification. Create a pattern matching the Underutilized Amazon EBS Volumes check and a status of WARN or ERROR. Set the rule target to an AWS Systems Manager Automation document that deletes the flagged volumes.
The correct configuration uses Amazon EventBridge to natively match Trusted Advisor notifications. Trusted Advisor sends events under the source 'aws.trustedadvisor' with the detail-type 'Trusted Advisor Check Item Refresh Notification' when checks are refreshed or change status. An EventBridge rule can target an AWS Systems Manager Automation document to automatically delete the flagged volumes with minimal administrative effort.
Step-by-Step Solution
Key Concept
Automating AWS Trusted Advisor Cost Optimization checks via Amazon EventBridge and AWS Systems Manager