Usecase Universe

A collective of use cases for DevOps teams

Browse a variety of 300+ predefined templates to automate all your AWS actions

Create Template
Solutions
All Categories

AWS Best Practices

24 Times Used
22 MAY 2019
Report RDS Free Storage Space
AWS Best Practices
RDS
AWS Best Practices

This workflow sends an automated report of RDS instances that are low on storage. Detecting RDS database instances that run low on disk space is crucial when these instances are used in production by latency-sensitive applications as this can help you take immediate actions and expand the storage space in order to maintain an optimal response time. This is an important part of your monitoring setup. 


Benefits


  • Cost optimization
  • Storage optimization
  • Status reporting & monitoring


Workflow Brief


The workflow retrieves all the RDS DB instances and monitors their storage state with the “AWS monitoring” node, all the instances that are found to be low on storage are filtered and sent to the Report node which will be used to notify you of the appropriate instances. The workflow is set up in a fully no-code fashion, where the ‘Monitoring Node’ directly integrates and sends you monitoring data in a readable format. The data can be retrieved for any resource or sub-resource.


Process


The workflow consists of 5 nodes. The workflow is set to be triggered by an external application (Jira ticket, Email etc). As soon as the resource node collects all the instances (you can filter out instances to be retrieved using Additional Parameters), the AWS monitoring node has all the parameters set to monitor your instances. Subsequently, the low storage instances are filtered out with the custom function written on the filter node. The Report node sends an Email/Slack notification to the user.

EC2 Instance Termination Protection Is Disabled
EC2
AWS Best Practices
AWS Best Practices

EC2 Termination Protection ensures that the instances cannot be terminated accidentally from the Console, API or CLI. These instances can be terminated only after the termination protection setting is turned off.

Send a report of all instances which are not part of an Auto-Scaling Group (ASG)
EC2
Security
AWS Best Practices
Security

It is an AWS best practice to launch every EC2 machine in an AWS Auto Scaling Group to achieve zero downtime. This workflow sends a report of instances not launched in an auto-scaling group.

Report Lambdas whose DLQ is not set
Lambda
AWS Best Practices
AWS Best Practices

This workflow helps generate a report of Lambda Functions whose DLQ is not set.

Notifies if the Amazon CloudWatch default event bus created within your account allows unknown cross-account event delivery.
CloudWatch
Security
Security
AWS Best Practices

An AWS CloudWatch event bus is a feature that facilitates AWS accounts to share events with each other.Amazon CloudWatch event buses are configured to allow access only to friendly AWS accounts in order to prevent unauthorized users from sharing their CloudWatch events. This is AWS best Paractice to notifiy if the Amazon CloudWatch default event bus created within your account allows unknown cross-account event delivery.

Notify if Cloudwatch event bus allows access to everyone(*).
CloudWatch
Security
AWS Best Practices
Security

An AWS CloudWatch default event bus is a feature that facilitates AWS accounts to share events with each other. This is template notify if your CloudWatch default event bus available within your AWS account allows access to everyone (*). This is AWS best practice to allow only the authorized users to send their events data by managing the permissions defined for the default event bus.

Daily/Weekly reports of Lambda's Duration
Lambda
AWS Best Practices
AWS Best Practices

Monitors metrics to make sure your Lambdas are running as they should. It helps in finding anomalies and improve Lambda Function performance.

Notify If any EC2 instance in your account is not Launched using approved/golden AMIs
EC2
Security
Operational Excellence
AWS Best Practices
Security

It is an AWS best practice to launch EC2 machine from an approved/golden AMI. Approved AMI is an image of an EC2 Instance containing all the necessary software and settings configured for your application; which helps in scaling, and quick & secure deployment.

Send report of AWS ASG which does not have multiple AZ
AWS Auto Scaling
AWS Best Practices
AWS Best Practices

Notifies that whether your Amazon Auto Scaling Groups (ASGs) span across multiple Availability Zones (AZs) within an AWS region. This is AWS best practice to expand the availability of your auto-scaled applications. When hosting your AWS ASGs within a multi-AZ environment, if one AZ becomes unhealthy or unavailable, the Auto Scaling Group launches new EC2 instances in an unaffected Availability Zone, enhancing the availability and reliability of the ASG.

Notify if an unreasonably high number of cache cluster nodes are provisioned
Cost Saving
AWS Best Practices
ElastiCache
Cost Saving
Security

Make sure the number of ElastiCache cluster cache nodes provisioned in your AWS account has not reached the limit set by your organization. Monitoring and setting limits will assist you to handle your resources better and avoid unforeseen costs in your AWS bill.

Send report elastiSearch instances not having the desired instance and dedicated master type established by your organization
Elasticsearch Service
Security
Compliance
AWS Best Practices
Security

Setting limits for the type of AWS ElasticSearch instances will help you address internal compliance requirements and prevent unexpected charges on your AWS bill. Ensure that your existing AWS instances and dedicated master have the desired type established by your organization based on the caching workload required.

Instances Everyday States
EC2
AWS Best Practices
AWS Best Practices

Generates a brief report of all the instances and their state.

Security Group internet accessibility Report
AWS Best Practices
AWS Best Practices
VPC

Sends a report of all the VPC'c whose tunnel State is down

Reserved Instance Lease Expiration (7 Days)
AWS Best Practices
EC2
AWS Best Practices

Checks for Amazon EC2 Reserved Instances that are scheduled to expire within the next 7 days

Hardware MFA On Root Account
AWS Best Practices
AWS Best Practices
IAM

Checks the root account and warns if hardware multi-factor authentication (MFA) is not enabled