AWS
Runs an ad-hoc user-provided command, and if the provided command outputs a non-empty string to stdout then a health score of 0 (unhealthy) is pushed, otherwise if there is no output, indicating no issues, then a 1 is pushed.
User commands should filter expected/healthy content (eg: with grep) and only output found errors.
Tasks:
Tasks:
- ${TASK_TITLE}
Runs an ad-hoc user-provided command, and if the provided command outputs a non-empty string to stdout then an issue is generated with a configurable title and content.
User commands should filter expected/healthy content (eg: with grep) and only output found errors.
Tasks:
Tasks:
- TASK_TITLE
This sli runs a user provided awscli command and pushes the metric. The supplied command must result in distinct single metric. Command line tools like jq are available.
Tasks:
Tasks:
- ${TASK_TITLE}
This taskset runs a user provided awscli command and adds the output to the report. Command line tools like jq are available.
Tasks:
Tasks:
- TASK_TITLE
Monitor AWS Lambda Invocation Errors
Tasks:
Tasks:
- Analyze AWS Lambda Invocation Errors
Scans for AWS Lambda invocation errors
Tasks:
Tasks:
- List Lambda Versions and Runtimes
- Analyze AWS Lambda Invocation Errors
- Monitor AWS Lambda Performance Metrics
Queries AWS CloudWatch for a list of EC2 instances with a high amount of resource utilization, raising issues when overutilized instances are found.
Tasks:
Tasks:
- Check For Overutilized Ec2 Instances
Monitors the health status of elasticache redis in the AWS region.
Tasks:
Tasks:
- Scan ElastiCaches
Checks the health status of Elasticache redis in the given region.
Tasks:
Tasks:
- Scan AWS Elasticache Redis Status
Monitors the status of EKS / Fargate in the given AWS region.
Tasks:
Tasks:
- Check EKS Cluster Health Status
Checks the health status of EKS and/or Fargate clusters in the given AWS region.
Tasks:
Tasks:
- Check EKS Fargate Cluster Health Status
- Check EKS Cluster Health Status
- List EKS Cluster Metrics
Generates a report for S3 buckets in a AWS region
Tasks:
Tasks:
- Check AWS S3 Bucket Storage Utilization
Queries a node group within a EKS cluster to check if the nodegroup has degraded service, indicating ongoing reboots or other issues.
Tasks:
Tasks:
- Check EKS Nodegroup Status
Counts the number of S3 buckets in an Account that are insecure or unhealthy.
Tasks:
Tasks:
- Count S3 Buckets With Public Access in AWS Account `${AWS_ACCOUNT_NAME}`
Generates a report on S3 buckets in an Account that are insecure or unhealthy.
Tasks:
Tasks:
- List S3 Buckets With Public Access in AWS Account `AWS_ACCOUNT_NAME`
Counts the number of EBS resources by identifying unattached volumes, unused and aged snapshots, and unencrypted volumes.
Tasks:
Tasks:
- Check Unattached EBS Volumes in `${AWS_REGION}`
- Check Unencrypted EBS Volumes in `${AWS_REGION}`
- Check Unused EBS Snapshots in `${AWS_REGION}`
- Generate EBS Score
Check for AWS EBS resources by identifying unattached volumes, unused snapshots, and unencrypted volumes.
Tasks:
Tasks:
- List Unattached EBS Volumes in AWS Region `AWS_REGION` in AWS account `AWS_ACCOUNT_ID`
- List Unencrypted EBS Volumes in AWS Region `AWS_REGION` in AWS account `AWS_ACCOUNT_ID`
- List Unused EBS Snapshots in AWS Region `AWS_REGION` in AWS account `AWS_ACCOUNT_ID`
Retrieve all recently created AWS accounts.
Tasks:
Tasks:
- Get The Recently Created AWS Accounts
Performs a suite of security checks against a set of AWS EC2 instances.
Checks include untagged instances, dangling volumes, open routes.
Tasks:
Tasks:
- Check For Untagged instances
- Check For Dangling Volumes
- Check For Open Routes
- Check For Overused Instances
- Check For Underused Instances
- Check For Underused Volumes
- Check For Overused Volumes
Retrieve the number of detected AWS CloudFormation stack events over a given history
Tasks:
Tasks:
- Fetch CloudFormation Stack Events
Identify stale AWS S3 buckets, based on last modified object timestamp.
Tasks:
Tasks:
- Create Report For Stale Buckets
Monitors AWS cost and usage data for the latest billing period.
Accepts one tag for continuous monitoring.
Tasks:
Tasks:
- Get All Billing Sliced By Tags
Retrieve the result of an AWS CloudWatch Metrics Insights query.
Tasks:
Tasks:
- Running CloudWatch Metric Query And Pushing The Result
Retrieve aggregate results from multiple AWS Cloudwatch Metrics Insights queries ran against tagged resources.
This codebundle fetches a list of instance IDs filtered by tags, and uses them
to run a set of AWS metric queries against the CloudWatch metrics insights API
and pushes an aggregated/transformed value provided by the API as a metric.
Tasks:
Tasks:
- Run CloudWatch Metric Query Across Set Of IDs And Push Metric
Creates a report of AWS line item costs filtered to a list of tagged resources
Tasks:
Tasks:
- Get All Billing Sliced By Tags
Triage and troubleshoot performance and usage of an AWS EC2 instance
Tasks:
Tasks:
- Get Max VM CPU Utilization In Last 3 Hours
- Get Lowest VM CPU Credits In Last 3 Hours
- Get Max VM CPU Credit Usage In Last 3 hours
- Get Max VM Memory Utilization In Last 3 Hours
- Get Max VM Volume Usage In Last 3 Hours
Retrieve binary result from an AWS CloudWatch Insights query.
Pushes 0 (success) if logs are found (activity) or 1 if no logs were found in the time window.
Tasks:
Tasks:
- Running CloudWatch Log Query And Pushing 1 If No Results Found
Retrieve number of results from an AWS CloudWatch Insights query.
Tasks:
Tasks:
- Running CloudWatch Log Query And Pushing The Count Of Results
Creates a URL to a AWS CloudWatch metrics dashboard with a running query.
Tasks:
Tasks:
- Get CloudWatch MetricQuery Insights URL
Triage and troubleshoot various issues with AWS CloudFormation
Tasks:
Tasks:
- Get All Recent Stack Events