[Music]
hello hello welcome to solving with AWS
solutions your deep dive into
architecture is built by AWS that are
ready to deploy instantly in the cloud
I'm Rob your host join with Tom a man
who exercises with step functions
instead of a Stairmaster have you ever
hit an AWS service limit had to rush to
request an increase and wish you'd known
ahead of time AWS limits monitor
solutions solves this problem for you
it helps customers to check their usage
against service limits by proactively
tracking resource usage and notifying
customers as they approach service
limits from a single deployment the
solution can monitor usage and service
limits across multiple accounts alright
let's get into it so tom talked to me
about AWS limit monitor yeah let's take
a look all right this is the landing
page for the solution we have a brief
overview architectural diagram a link to
the CloudFormation template so you can
launch the solution in your own account
detailed implementation guide and the
source code is available on github
awesome can you take me through the
architecture yeah let's take a closer
look this is the architectural overview
we have two cloud formation templates
for this solution if you want to just
have the monitoring working in a single
account you just launched the first
template if you want to monitor multiple
accounts we do have a second
CloudFormation template to help you set
that up as well all right how do we get
started with this actual architecture so
the focus really is on the left hand
side of this primary account this is
where we're gathering the information on
usage and limits so if we focus in on
here we've got two services that we're
leveraging for this first one is AWS
trusted advisor that's a service that
will help customers understand how their
infrastructure is working and join align
it better to both AWS best practices
show me a little bit about trust advisor
yeah if we go to the services landing
page the service landing page is a good
diagram here that will explain how it's
working but with the trusted advisor
will scan your account and look for ways
to improve cost optimization performance
look at security fault tolerance
and what we're particularly interested
in here is the service limits so this is
really the backbone of our architecture
for limit monitoring it is the we have a
lambda function if I take us back to the
architecture we have a lambda function
that will call trusted advisor and what
we're getting back from there is usage
so we're looking across your account at
all the different services that you're
using and then we're checking that off
against our limits for soldiers
so what other information we're
gathering from other services so trusted
advisor will cover a whole broad range
of services like V PC I am as three we
we are using a second service which is
ADA we a service quota and again in
conjunction with a lambda function that
will run every five minutes we're
specifically looking for limit and usage
information on ec2 ec2 CPU is the way
that we're monitoring that catch so that
will run every five minutes so that
we're checking that you're not about to
hit any of those limits for ec2 so now
that we've actually performed those
checks how we're gathering that
information together so we're using a
cloud Watts rule to capture the events
from those lambda functions and then
taking that information and we can
deliver that in a number of different
ways okay out of the box we're using sqs
to capture that information and then we
have a second lambda function that will
then pass that information and store it
in dynamo dB let's go persistent history
then persistent history have a kind of
audit trail of what's been happening all
right then there's two other options
that come with the CloudFormation
template you have SNS so if you want to
receive email notifications about
warnings and errors you'll get that
through there and then there is a second
option to set up a slack channel so
forgive me you would have to pre set up
a slack channel and then you can have to
have the solution actually deliver that
information through that channel but we
could configure other collaboration
tools as part of this as well correct so
that's a very popular tool there are
many other ones out there this is just
demonstrating how you can integrate with
the solution if we have a secondary
account we want to monitor how do we
deploy the cloud formation for that
Shirley so when we deployed it the
solution to the primary account there's
an option to list out your additional
accounts that you want to monitor
that's a parameter in the cloud
formation template once that's been
deployed you then launch a second
CloudFormation template into
all of the other accounts which deploys
this infrastructure here okay and if you
look this is an exact replica of what we
had in the primary account the
difference being is that when we collect
this information through cloud watch
we're using Amazon event bridge to pass
that information back into the primary
account wow this is a great example of
how we can manage and govern our
existing workloads and save some money
yeah thanks for talking about a TBS
limit monitor you're welcome
so there you have it the AWS limit
monitor solution automatically compares
your usage against service limits a
single deployment of the solution can be
configured to monitor all of your
accounts giving you the peace of mind
that you'll be notified before you hit
any other limits in the future go check
out AWS limit monitor and all of our
other solutions on our AWS solutions
website see you there
you