AWS prescriptive-guidance documentation change
Summary
Updated documentation links, fixed formatting, and clarified authentication references (changed 'AWS Single Sign-On' to 'IAM Identity Center'). Added full FAQ section title.
Security assessment
Changes primarily involve documentation link corrections, formatting improvements, and terminology updates (e.g., AWS SSO to IAM Identity Center). While authentication methods are mentioned, there's no evidence of addressing specific security vulnerabilities or adding new security features. The IAM Identity Center reference update reflects branding changes rather than new security capabilities.
Diff
diff --git a/prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/amg-dashboarding-visualization.md b/prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/amg-dashboarding-visualization.md index c41a2714b..a9f1fbd15 100644 --- a//prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/amg-dashboarding-visualization.md +++ b//prescriptive-guidance/latest/implementing-logging-monitoring-cloudwatch/amg-dashboarding-visualization.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Designing and implementing logging and monitoring with Amazon CloudWatch ](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Designing and implementing logging and monitoring with Amazon CloudWatch](introduction.html) @@ -9 +9 @@ -[Amazon Managed Grafana](https://docs.aws.amazon.com//grafana/latest/userguide/what-is-Amazon-Managed-Service-Grafana.html) can be used to observe and visualize your AWS workloads. Amazon Managed Grafana helps you visualize and analyze your operational data at scale. [Grafana](https://grafana.com/) is an open-source analytics platform that helps you query, visualize, alert on, and understand your metrics wherever they are stored. Amazon Managed Grafana is particularly useful if your organization already uses Grafana for visualization of existing workloads and you want to extend coverage to AWS workloads. You can use Amazon Managed Grafana with CloudWatch by [adding it as a data source](https://docs.aws.amazon.com/grafana/latest/userguide/using-amazon-cloudwatch-in-AMG.html), which means that you can create visualizations using CloudWatch metrics. Amazon Managed Grafana supports AWS Organizations and you can centralize dashboards using CloudWatch metrics from multiple accounts and Regions. +[Amazon Managed Grafana](https://docs.aws.amazon.com/grafana/latest/userguide/what-is-Amazon-Managed-Service-Grafana.html) can be used to observe and visualize your AWS workloads. Amazon Managed Grafana helps you visualize and analyze your operational data at scale. [Grafana](https://grafana.com/) is an open-source analytics platform that helps you query, visualize, alert on, and understand your metrics wherever they are stored. Amazon Managed Grafana is particularly useful if your organization already uses Grafana for visualization of existing workloads and you want to extend coverage to AWS workloads. You can use Amazon Managed Grafana with CloudWatch by [adding it as a data source](https://docs.aws.amazon.com/grafana/latest/userguide/using-amazon-cloudwatch-in-AMG.html), which means that you can create visualizations using CloudWatch metrics. Amazon Managed Grafana supports AWS Organizations and you can centralize dashboards using CloudWatch metrics from multiple accounts and Regions. @@ -13 +13 @@ The following table provides the advantages and considerations for using Amazon -**Create visualizations and dashboards that integrate with data sources supported by Amazon Managed Grafana and open-source Grafana** | Amazon Managed Grafana helps you create visualizations and dashboards from many different data sources, including CloudWatch metrics. Amazon Managed Grafana includes a number of built-in data sources that span AWS services, open-source software, and COTS software. For more information about this, see [Built-in data sources](https://docs.aws.amazon.com//grafana/latest/userguide/AMG-data-sources-builtin.html) in the Amazon Managed Grafana documentation. You can also add support for more data sources by upgrading your workspace to [Grafana Enterprise](https://grafana.com/docs/grafana/latest/enterprise/). Grafana also supports [data source plugins](https://grafana.com/grafana/plugins/) that allow you to communicate with different external systems. CloudWatch dashboards require a CloudWatch metric or CloudWatch Logs Insights query for data to be displayed display on a CloudWatch dashboard. +Create visualizations and dashboards that integrate with data sources supported by Amazon Managed Grafana and open-source Grafana| Amazon Managed Grafana helps you create visualizations and dashboards from many different data sources, including CloudWatch metrics. Amazon Managed Grafana includes a number of built-in data sources that span AWS services, open-source software, and COTS software. For more information about this, see [Built-in data sources](https://docs.aws.amazon.com/grafana/latest/userguide/AMG-data-sources-builtin.html) in the Amazon Managed Grafana documentation. You can also add support for more data sources by upgrading your workspace to [Grafana Enterprise](https://grafana.com/docs/grafana/latest/enterprise/). Grafana also supports [data source plugins ](https://grafana.com/grafana/plugins/)that allow you to communicate with different external systems. CloudWatch dashboards require a CloudWatch metric or CloudWatch Logs Insights query for data to be displayed display on a CloudWatch dashboard. @@ -15,2 +15,2 @@ The following table provides the advantages and considerations for using Amazon -**Manage access to your dashboarding solution separately from your AWS account access** | Amazon Managed Grafana requires the use of AWS IAM Identity Center (IAM Identity Center) and AWS Organizations for authentication and authorization. This enables you to authenticate users to Grafana by using identity federation that you might already use with IAM Identity Center or AWS Organizations. However, if you aren’t using IAM Identity Center or AWS Organizations, then it is set up as a part of the Amazon Managed Grafana setup process. This might become an issue if your organization has limited the use of IAM Identity Center or AWS Organizations. -**Ingest and access data across multiple accounts and Regions with AWS Organizations integration** | Amazon Managed Grafana integrates with AWS Organizations to enable you to read data from AWS sources such as CloudWatch and Amazon OpenSearch Service across all your accounts. This makes it possible to create dashboards that display visualizations using data across your accounts. To automatically enable data access across AWS Organizations, you need to set up your Amazon Managed Grafana workspace in the AWS Organizations management account. This is not recommended based on [AWS Organizations best practices for the management account](https://docs.aws.amazon.com//organizations/latest/userguide/orgs_best-practices_mgmt-acct.html). In contrast, CloudWatch also [supports cross-account, cross-Region dashboards for CloudWatch metrics](https://docs.aws.amazon.com//AmazonCloudWatch/latest/monitoring/cloudwatch_xaxr_dashboard.html). +**Manage access to your dashboarding solution separately from your AWS account access**| Amazon Managed Grafana requires the use of AWS IAM Identity Center (successor to AWS Single Sign-On) (IAM Identity Center) and AWS Organizations for authentication and authorization. This enables you to authenticate users to Grafana by using identity federation that you might already use with IAM Identity Center or AWS Organizations. However, if you aren't using IAM Identity Center or AWS Organizations, then it is set up as a part of the Amazon Managed Grafana setup process. This might become an issue if your organization has limited the use of IAM Identity Center or AWS Organizations. +**Ingest and access data across multiple accounts and Regions with AWS Organizations integration**| Amazon Managed Grafana integrates with AWS Organizations to enable you to read data from AWS sources such as CloudWatch and Amazon OpenSearch Service across all your accounts. This makes it possible to create dashboards that display visualizations using data across your accounts. To automatically enable data access across AWS Organizations, you need to set up your Amazon Managed Grafana workspace in the AWS Organizations management account. This is not recommended based on [AWS Organizations best practices for the management account](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_best-practices_mgmt-acct.html). In contrast, CloudWatch also [supports cross-account, cross-Region dashboards for CloudWatch metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_xaxr_dashboard.html). @@ -19 +19 @@ The following table provides the advantages and considerations for using Amazon -**Advanced setup and configuration for workspaces, permissions, and data sources** | Amazon Managed Grafana enables you to create multiple Grafana workspaces that have their own set of configured data sources, users, and policies. This can help you meet more advanced use case requirements, as well as advanced security configurations. The advanced capabilities might require your teams to grow their experience with Grafana if they don’t already have these skills. +**Advanced setup and configuration for workspaces, permissions, and data sources**| Amazon Managed Grafana enables you to create multiple Grafana workspaces that have their own set of configured data sources, users, and policies. This can help you meet more advanced use case requirements, as well as advanced security configurations. The advanced capabilities might require your teams to grow their experience with Grafana if they don't already have these skills. @@ -29 +29 @@ CloudWatch integration with AWS services -FAQ +Designing and implementing logging and monitoring with CloudWatch FAQ