Question

Difficulty: MediumAWS Trusted Advisor Cost Optimization Checks

A SysOps administrator wants to automate the remediation of underutilized Amazon EBS volumes flagged by AWS Trusted Advisor to optimize costs. The administrator wants to configure a rule that detects when the 'Underutilized Amazon EBS Volumes' check status changes to a warning or error state and automatically triggers a process to clean up these volumes. Which configuration will meet these requirements with the least administrative effort?

  1. Configure an Amazon EventBridge rule with the event source set to aws.trustedadvisor and the detail-type set to Trusted Advisor Check Item Refresh Notification. Create a pattern matching the Underutilized Amazon EBS Volumes check and a status of WARN or ERROR. Set the rule target to an AWS Systems Manager Automation document that deletes the flagged volumes.Answer
  2. B
    Create a custom AWS Config rule to monitor the attachment status of all EBS volumes. Configure an AWS Config remediation action pointing to a Systems Manager Automation document to delete unattached volumes, because Trusted Advisor checks cannot trigger EventBridge rules without an active AWS CloudTrail trail.
  3. C
    Create an AWS Budget with an alert threshold set to 100% of forecasted monthly EBS spending. Configure an AWS Budget action to trigger a Systems Manager Automation document that scans the account for underutilized EBS volumes and deletes them when the budget threshold is exceeded.
  4. D
    Enable cost allocation tags on all EBS volumes and configure an EventBridge rule with the event source set to aws.billing. Configure the rule to trigger an AWS Lambda function that queries the AWS Billing Console for low utilization tags and terminates the associated EBS volumes.

Answer

Configure an Amazon EventBridge rule with the event source set to aws.trustedadvisor and the detail-type set to Trusted Advisor Check Item Refresh Notification. Create a pattern matching the Underutilized Amazon EBS Volumes check and a status of WARN or ERROR. Set the rule target to an AWS Systems Manager Automation document that deletes the flagged volumes.
The correct configuration uses Amazon EventBridge to natively match Trusted Advisor notifications. Trusted Advisor sends events under the source 'aws.trustedadvisor' with the detail-type 'Trusted Advisor Check Item Refresh Notification' when checks are refreshed or change status. An EventBridge rule can target an AWS Systems Manager Automation document to automatically delete the flagged volumes with minimal administrative effort.

Step-by-Step Solution

1
Identify the source of AWS Trusted Advisor cost optimization events.
Trusted Advisor natively sends 'Trusted Advisor Check Item Refresh Notification' events to Amazon EventBridge under the 'aws.trustedadvisor' source.
This establishes the entry point for automated event-driven remediation of cost optimization checks.
2
Configure the EventBridge event pattern matching the underutilization check.
Create a rule filtering for the 'Underutilized Amazon EBS Volumes' check name with a status of 'WARN' or 'ERROR'.
This ensures that only underutilized EBS volumes trigger the automation, preventing executions for healthy resources or other unrelated checks.
3
Set the target of the EventBridge rule to a remediation runner.
Target an AWS Systems Manager Automation document designed to delete underutilized or unattached EBS volumes.
Systems Manager Automation provides a low-overhead, managed way to execute corrective actions without managing custom code.

Key Concept

Automating AWS Trusted Advisor Cost Optimization checks via Amazon EventBridge and AWS Systems Manager
Rate this question