AWS services for automation
You can use a number of AWS services to automate your IT operations. The following table lists the 21 OI domains and provides information to help you select the right service for each operational need.
Function | Domain | Launch focus and tools |
|---|---|---|
Core operations | Platform architecture and governance | Enterprise-wide governance, security baselines, multi-account strategy, and automated compliance. Usually covered by deploying the AWS Landing Zone solution, AWS Control Tower |
Core operations | Event and incident management | Logging, monitoring, automated incident response, and incident correlation using Amazon CloudWatch |
Core operations | Provisioning and configuration management | Infrastructure as code (IaC), automated deployment, and configuration compliance by using AWS Service Catalog |
Core operations | Availability and business continuity management | High availability, resiliency, disaster recovery, and business continuity by using AWS Resilience Hub |
Core operations | Monitoring and observability | Operational visibility, proactive monitoring, and automated response to service health issues by using Amazon CloudWatch |
Security and control | Change management | Compliance controls, risk management, and tracking changes by using AWS Config |
Security and control | Asset management | Transparency and resource lifecycle tracking by using AWS Resource Explorer |
Security and control | Identity and access management | Least privilege implementation through AWS Identity and Access Management (IAM) |
Security and control | Security management | Security controls and incident response by using AWS Security Hub CSPM |
Security and control | Compliance and risk management | Regulatory compliance, automated auditing, and continuous risk assessment by using AWS Artifact |
Security and control | Data governance and sovereignty management | Data classification, regional compliance requirements such as General Data Protection Regulation (GDPR), and data residency controls by using AWS GovCloud (US) |
Business management | FinOps management | Cost optimization, governance, and billing reporting by using AWS Cost Explorer |
Business management | Capacity planning and forecasting | Capacity forecasting by using AWS Cost Explorer forecasting, resource optimization by using AWS Compute Optimizer |
Business management | Organizational change management | Training, communications, transformation buy-in, adoption frameworks, and managing the people side of cloud transformation. |
Business management | Vendor management | License and provider management through AWS Marketplace |
Business management | Sustainability management | Environmental impact monitoring and optimization by using AWS Customer Carbon Footprint Tool |
Business management | Cloud value maximization | Maximizing the business value with the AWS Cloud by optimizing costs, improving operational efficiency, and leveraging cloud capabilities effectively. This includes understanding cost drivers by using AWS Cost Explorer and implementing strategic purchasing (Savings Plans |
Supporting functions | Reporting and analytics | Usage trends and service health monitoring by using Amazon OpenSearch Service |
Supporting functions | Continuous improvement | Process iterations by using AWS Trusted Advisor |
Supporting functions | Application lifecycle management | Software development lifecycle, people, process, and tools integrations, DevOps workstream with Amazon Q Developer |
Supporting functions | AI/ML operations | Enhanced operational capabilities with CloudWatch anomaly detection, CloudWatch investigations, and Amazon DevOps Guru for predictive monitoring and issue detection; AWS Security Hub CSPM |
