本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。
# 使用 AWS Resilience Hub APIs來描述和管理應用程式
作為使用 AWS Resilience Hub 主控台描述和管理應用程式的替代方案， AWS Resilience Hub 可讓您使用 AWS Resilience Hub APIs描述和管理應用程式。本章說明如何使用 AWS Resilience Hub APIs建立應用程式。它也會定義執行 APIs以及您必須提供適當範例的參數值。如需詳細資訊，請參閱下列主題：
+ [準備應用程式](prepare-app-using-api.md)
+ [執行和管理 AWS Resilience Hub 彈性評估](running-app-using-api.md)
+ [修改您的應用程式](modify-application-using-api.md)
# 準備應用程式
若要準備應用程式，您必須先建立應用程式、指派彈性政策，然後從輸入來源匯入應用程式資源。如需用於準備應用程式之 AWS Resilience Hub APIs的詳細資訊，請參閱下列主題：
+ [建立應用程式](#create-app-using-api)
+ [建立彈性政策](#create-res-policy-using-api)
+ [從輸入來源匯入資源並監控匯入狀態](#import-app-resource-using-api)
+ [發佈應用程式的草稿版本並指派彈性政策](#publish-application-using-api)
## 建立應用程式
若要在 中建立新的應用程式 AWS Resilience Hub，您必須呼叫 `CreateApp` API 並提供唯一的應用程式名稱。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateApp.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateApp.html)。
下列範例示範如何使用 AWS Resilience Hub `CreateApp` API 在 `newApp`中建立新的應用程式。
### 請求
```
aws resiliencehub create-app --name newApp
```
### 回應
```
{
"app": {
"appArn": "",
"name": "newApp",
"creationTime": "2022-10-26T19:48:00.434000+03:00",
"status": "Active",
"complianceStatus": "NotAssessed",
"resiliencyScore": 0.0,
"tags": {},
"assessmentSchedule": "Disabled"
}
}
```
## 建立彈性政策
建立應用程式後，您必須建立彈性政策，讓您能夠使用 `CreateResiliencyPolicy` API 了解應用程式的彈性狀態。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateResiliencyPolicy.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateResiliencyPolicy.html)。
下列範例示範如何使用 AWS Resilience Hub `CreateResiliencyPolicy` API 在 中`newPolicy`為您的應用程式建立 。
### 請求
```
aws resiliencehub create-resiliency-policy \
--policy-name newPolicy --tier NonCritical \
--policy '{"AZ": {"rtoInSecs": 172800,"rpoInSecs": 86400}, \
"Hardware": {"rtoInSecs": 172800,"rpoInSecs": 86400}, \
"Software": {"rtoInSecs": 172800,"rpoInSecs": 86400}}'
```
### 回應
```
{
"policy": {
"policyArn": "",
"policyName": "newPolicy",
"policyDescription": "",
"dataLocationConstraint": "AnyLocation",
"tier": "NonCritical",
"estimatedCostTier": "L1",
"policy": {
"AZ": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
},
"Hardware": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
},
"Software": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
}
},
"creationTime": "2022-10-26T20:48:05.946000+03:00",
"tags": {}
}
}
```
## 從輸入來源匯入資源並監控匯入狀態
AWS Resilience Hub 提供下列 APIs將資源匯入您的應用程式：
+ `ImportResourcesToDraftAppVersion` – 此 API 可讓您從不同的輸入來源，將資源匯入應用程式的草稿版本。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ImportResourcesToDraftAppVersion.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ImportResourcesToDraftAppVersion.html)。
+ `PublishAppVersion` – 此 API 會發佈應用程式的新版本，以及更新的 AppComponents。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_PublishAppVersion.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_PublishAppVersion.html)。
+ `DescribeDraftAppVersionResourcesImportStatus` – 此 API 可讓您監控 資源匯入應用程式版本的狀態。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeDraftAppVersionResourcesImportStatus.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeDraftAppVersionResourcesImportStatus.html)。
下列範例示範如何使用 AWS Resilience Hub `ImportResourcesToDraftAppVersion` API 將資源匯入 中的應用程式。
### 請求
```
aws resiliencehub import-resources-to-draft-app-version \
--app-arn \
--terraform-sources '[{"s3StateFileUrl": }]'
```
### 回應
```
{
"appArn": "",
"appVersion": "draft",
"sourceArns": [],
"status": "Pending",
"terraformSources": [
{
"s3StateFileUrl":
}
]
}
```
下列範例示範如何使用 AWS Resilience Hub `CreateAppVersionResource` API 在 中手動將資源新增至您的應用程式。
### 請求
```
aws resiliencehub create-app-version-resource \
--app-arn \
--resource-name "backup-efs" \
--logical-resource-id '{"identifier": "backup-efs"}' \
--physical-resource-id '' \
--resource-type AWS::EFS::FileSystem \
--app-components '["new-app-component"]'
```
### 回應
```
{
"appArn": "",
"appVersion": "draft",
"physicalResource": {
"resourceName": "backup-efs",
"logicalResourceId": {
"identifier": "backup-efs"
},
"physicalResourceId": {
"identifier": "",
"type": "Arn"
},
"resourceType": "AWS::EFS::FileSystem",
"appComponents": [
{
"name": "new-app-component",
"type": "AWS::ResilienceHub::StorageAppComponent",
"id": "new-app-component"
}
]
}
}
```
下列範例示範如何使用 AWS Resilience Hub `DescribeDraftAppVersionResourcesImportStatus` API 監控 中資源的匯入狀態。
### 請求
```
aws resiliencehub describe-draft-app-version-resources-import-status \
--app-arn
```
### 回應
```
{
"appArn": "",
"appVersion": "draft",
"status": "Success",
"statusChangeTime": "2022-10-26T19:55:18.471000+03:00"
}
```
## 發佈應用程式的草稿版本並指派彈性政策
執行評估之前，您必須先發佈應用程式的草稿版本，並將彈性政策指派給應用程式的發行版本。
**發佈應用程式的草稿版本並指派彈性政策**
1. 若要發佈應用程式的草稿版本，請使用 `PublishAppVersion` API。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_PublishAppVersion.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_PublishAppVersion.html)。
下列範例示範如何使用 AWS Resilience Hub `PublishAppVersion` API 在 中發佈應用程式的草稿版本。
**請求**
```
aws resiliencehub publish-app-version \
--app-arn
```
**回應**
```
{
"appArn": "",
"appVersion": "release"
}
```
1. 使用 `UpdateApp` API 將彈性政策套用至應用程式的發行版本。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateApp.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateApp.html)。
下列範例示範如何使用 AWS Resilience Hub `UpdateApp` API 將彈性政策套用至 中發行版本的應用程式。
**請求**
```
aws resiliencehub update-app \
--app-arn \
--policy-arn
```
**回應**
```
{
"app": {
"appArn": "",
"name": "newApp",
"policyArn": "",
"creationTime": "2022-10-26T19:48:00.434000+03:00",
"status": "Active",
"complianceStatus": "NotAssessed",
"resiliencyScore": 0.0,
"tags": {
"resourceArn": ""
},
"assessmentSchedule": "Disabled"
}
}
```
# 執行和管理 AWS Resilience Hub 彈性評估
發佈應用程式的新版本後，您必須執行新的彈性評估並分析結果，以確保您的應用程式符合彈性政策中定義的預估工作負載 RTO 和預估 RPO。評估會將每個應用程式元件組態與政策進行比較，並提出警示、SOP 和測試建議。
如需詳細資訊，請參閱下列主題：
+ [執行和監控 AWS Resilience Hub 彈性評估](#run-assess-analyze-using-api)
+ [檢查評估結果](#run-assessment-using-api)
## 執行和監控 AWS Resilience Hub 彈性評估
若要在 中執行彈性評估 AWS Resilience Hub 並監控其狀態，您必須使用下列 APIs：
+ `StartAppAssessment` – 此 API 會為應用程式建立新的評估。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartAppAssessment.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_StartAppAssessment.html)。
+ `DescribeAppAssessment` – 此 API 說明應用程式的評估，並提供評估的完成 狀態。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppAssessment.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppAssessment.html)。
下列範例示範如何使用 `StartAppAssessment` API 在 中 AWS Resilience Hub 開始執行新的評估。
### 請求
```
aws resiliencehub start-app-assessment \
--app-arn \
--app-version release \
--assessment-name first-assessment
```
### 回應
```
{
"assessment": {
"appArn": "",
"appVersion": "release",
"invoker": "User",
"assessmentStatus": "Pending",
"startTime": "2022-10-27T08:15:10.452000+03:00",
"assessmentName": "first-assessment",
"assessmentArn": "",
"policy": {
"policyArn": "",
"policyName": "newPolicy",
"dataLocationConstraint": "AnyLocation",
"policy": {
"AZ": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
},
"Hardware": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
},
"Software": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
}
}
},
"tags": {}
}
}
```
下列範例示範如何使用 AWS Resilience Hub `DescribeAppAssessment` API 在 中監控評估的狀態。您可以從 `assessmentStatus`變數擷取評估的狀態。
### 請求
```
aws resiliencehub describe-app-assessment \
--assessment-arn
```
### 回應
```
{
"assessment": {
"appArn": "",
"appVersion": "release",
"cost": {
"amount": 0.0,
"currency": "USD",
"frequency": "Monthly"
},
"resiliencyScore": {
"score": 0.27,
"disruptionScore": {
"AZ": 0.42,
"Hardware": 0.0,
"Region": 0.0,
"Software": 0.38
}
},
"compliance": {
"AZ": {
"achievableRtoInSecs": 0,
"currentRtoInSecs": 4500,
"currentRpoInSecs": 86400,
"complianceStatus": "PolicyMet",
"achievableRpoInSecs": 0
},
"Hardware": {
"achievableRtoInSecs": 0,
"currentRtoInSecs": 2595601,
"currentRpoInSecs": 2592001,
"complianceStatus": "PolicyBreached",
"achievableRpoInSecs": 0
},
"Software": {
"achievableRtoInSecs": 0,
"currentRtoInSecs": 4500,
"currentRpoInSecs": 86400,
"complianceStatus": "PolicyMet",
"achievableRpoInSecs": 0
}
},
"complianceStatus": "PolicyBreached",
"assessmentStatus": "Success",
"startTime": "2022-10-27T08:15:10.452000+03:00",
"endTime": "2022-10-27T08:15:31.883000+03:00",
"assessmentName": "first-assessment",
"assessmentArn": "",
"policy": {
"policyArn": "",
"policyName": "newPolicy",
"dataLocationConstraint": "AnyLocation",
"policy": {
"AZ": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
},
"Hardware": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
},
"Software": {
"rtoInSecs": 172800,
"rpoInSecs": 86400
}
}
},
"tags": {}
}
}
```
## 檢查評估結果
成功完成評估後，您可以使用下列 APIs檢查評估結果。
+ `DescribeAppAssessment` – 此 API 可讓您根據彈性政策追蹤應用程式的目前狀態。此外，您也可以從 `complianceStatus` 變數中擷取合規狀態，並從`resiliencyScore`結構中擷取每個中斷類型的彈性分數。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppAssessment.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DescribeAppAssessment.html)。
+ `ListAlarmRecommendations` – 此 API 可讓您使用評估的 Amazon Resource Name (ARN) 取得警示建議。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAlarmRecommendations.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_ListAlarmRecommendations.html)。
**注意**
若要取得 SOP 和 FIS 測試建議，請使用 `ListSopRecommendations`和 `ListTestRecommendations` API。 APIs
下列範例示範如何使用 `ListAlarmRecommendations` API 評估的 Amazon Resource Name (ARN) 取得警示建議。
**注意**
若要取得 SOP 和 FIS 測試建議，請將 取代為 `ListSopRecommendations`或 `ListTestRecommendations`。
### 請求
```
aws resiliencehub list-alarm-recommendations \
--assessment-arn
```
### 回應
```
{
"alarmRecommendations": [
{
"recommendationId": "78ece7f8-c776-499e-baa8-b35f5e8b8ba2",
"referenceId": "app_common:alarm:synthetic_canary:2021-04-01",
"name": "AWSResilienceHub-SyntheticCanaryInRegionAlarm_2021-04-01",
"description": "A monitor for the entire application, configured to constantly verify that the application API/endpoints are available",
"type": "Metric",
"appComponentName": "appcommon",
"items": [
{
"resourceId": "us-west-2",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
],
"prerequisite": "Make sure Amazon CloudWatch Synthetics is setup to monitor the application (see the docs). \nMake sure that the Synthetics Name passed in the alarm dimension matches the name of the Synthetic Canary. It Defaults to the name of the application.\n"
},
{
"recommendationId": "d9c72c58-8c00-43f0-ad5d-0c6e5332b84b",
"referenceId": "efs:alarm:percent_io_limit:2020-04-01",
"name": "AWSResilienceHub-EFSHighIoAlarm_2020-04-01",
"description": "An alarm by AWS Resilience Hub that reports when Amazon EFS I/O load is more than 90% for too much time",
"type": "Metric",
"appComponentName": "storageappcomponent-rlb",
"items": [
{
"resourceId": "fs-0487f945c02f17b3e",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
]
},
{
"recommendationId": "09f340cd-3427-4f66-8923-7f289d4a3216",
"referenceId": "efs:alarm:mount_failure:2020-04-01",
"name": "AWSResilienceHub-EFSMountFailureAlarm_2020-04-01",
"description": "An alarm by AWS Resilience Hub that reports when volume failed to mount to EC2 instance",
"type": "Metric",
"appComponentName": "storageappcomponent-rlb",
"items": [
{
"resourceId": "fs-0487f945c02f17b3e",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
],
"prerequisite": "* Make sure Amazon EFS utils are installed(see the docs).\n* Make sure cloudwatch logs are enabled in efs-utils (see the docs).\n* Make sure that you've configured `log_group_name` in `/etc/amazon/efs/efs-utils.conf`, for example: `log_group_name = /aws/efs/utils`.\n* Use the created `log_group_name` in the generated alarm. Find `LogGroupName: REPLACE_ME` in the alarm and make sure the `log_group_name` is used instead of REPLACE_ME.\n"
},
{
"recommendationId": "b0f57d2a-1220-4f40-a585-6dab1e79cee2",
"referenceId": "efs:alarm:client_connections:2020-04-01",
"name": "AWSResilienceHub-EFSHighClientConnectionsAlarm_2020-04-01",
"description": "An alarm by AWS Resilience Hub that reports when client connection number deviation is over the specified threshold",
"type": "Metric",
"appComponentName": "storageappcomponent-rlb",
"items": [
{
"resourceId": "fs-0487f945c02f17b3e",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
]
},
{
"recommendationId": "15f49b10-9bac-4494-b376-705f8da252d7",
"referenceId": "rds:alarm:health-storage:2020-04-01",
"name": "AWSResilienceHub-RDSInstanceLowStorageAlarm_2020-04-01",
"description": "Reports when database free storage is low",
"type": "Metric",
"appComponentName": "databaseappcomponent-hji",
"items": [
{
"resourceId": "terraform-20220623141426115800000001",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
]
},
{
"recommendationId": "c1906101-cea8-4f77-be7b-60abb07621f5",
"referenceId": "rds:alarm:health-connections:2020-04-01",
"name": "AWSResilienceHub-RDSInstanceConnectionSpikeAlarm_2020-04-01",
"description": "Reports when database connection count is anomalous",
"type": "Metric",
"appComponentName": "databaseappcomponent-hji",
"items": [
{
"resourceId": "terraform-20220623141426115800000001",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
]
},
{
"recommendationId": "f169b8d4-45c1-4238-95d1-ecdd8d5153fe",
"referenceId": "rds:alarm:health-cpu:2020-04-01",
"name": "AWSResilienceHub-RDSInstanceOverUtilizedCpuAlarm_2020-04-01",
"description": "Reports when database used CPU is high",
"type": "Metric",
"appComponentName": "databaseappcomponent-hji",
"items": [
{
"resourceId": "terraform-20220623141426115800000001",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
]
},
{
"recommendationId": "69da8459-cbe4-4ba1-a476-80c7ebf096f0",
"referenceId": "rds:alarm:health-memory:2020-04-01",
"name": "AWSResilienceHub-RDSInstanceLowMemoryAlarm_2020-04-01",
"description": "Reports when database free memory is low",
"type": "Metric",
"appComponentName": "databaseappcomponent-hji",
"items": [
{
"resourceId": "terraform-20220623141426115800000001",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
]
},
{
"recommendationId": "67e7902a-f658-439e-916b-251a57b97c8a",
"referenceId": "ecs:alarm:health-service_cpu_utilization:2020-04-01",
"name": "AWSResilienceHub-ECSServiceHighCpuUtilizationAlarm_2020-04-01",
"description": "An alarm by AWS Resilience Hub that triggers when CPU utilization of ECS tasks of Service exceeds the threshold",
"type": "Metric",
"appComponentName": "computeappcomponent-nrz",
"items": [
{
"resourceId": "aws_ecs_service_terraform-us-east-1-demo",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
]
},
{
"recommendationId": "fb30cb91-1f09-4abd-bd2e-9e8ee8550eb0",
"referenceId": "ecs:alarm:health-service_memory_utilization:2020-04-01",
"name": "AWSResilienceHub-ECSServiceHighMemoryUtilizationAlarm_2020-04-01",
"description": "An alarm by AWS Resilience Hub for Amazon ECS that indicates if the percentage of memory that is used in the service, is exceeding specified threshold limit",
"type": "Metric",
"appComponentName": "computeappcomponent-nrz",
"items": [
{
"resourceId": "aws_ecs_service_terraform-us-east-1-demo",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
]
},
{
"recommendationId": "1bd45a8e-dd58-4a8e-a628-bdbee234efed",
"referenceId": "ecs:alarm:health-service_sample_count:2020-04-01",
"name": "AWSResilienceHub-ECSServiceSampleCountAlarm_2020-04-01",
"description": "An alarm by AWS Resilience Hub for Amazon ECS that triggers if the count of tasks isn't equal Service Desired Count",
"type": "Metric",
"appComponentName": "computeappcomponent-nrz",
"items": [
{
"resourceId": "aws_ecs_service_terraform-us-east-1-demo",
"targetAccountId": "12345678901",
"targetRegion": "us-west-2",
"alreadyImplemented": false
}
],
"prerequisite": "Make sure the Container Insights on Amazon ECS is enabled: (see the docs)."
}
]
}
```
下列範例顯示如何使用 `ListAppComponentRecommendations` API 取得組態建議 （如何改善目前彈性的建議）。
### 請求
```
aws resiliencehub list-app-component-recommendations \
--assessment-arn
```
### 回應
```
{
"componentRecommendations": [
{
"appComponentName": "computeappcomponent-nrz",
"recommendationStatus": "MetCanImprove",
"configRecommendations": [
{
"cost": {
"amount": 0.0,
"currency": "USD",
"frequency": "Monthly"
},
"appComponentName": "computeappcomponent-nrz",
"recommendationCompliance": {
"AZ": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": " Estimated time to restore cluster with volumes. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Based on the frequency of the backups"
},
"Hardware": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": " Estimated time to restore cluster with volumes. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Based on the frequency of the backups"
},
"Software": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": " Estimated time to restore cluster with volumes. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Based on the frequency of the backups"
}
},
"optimizationType": "LeastCost",
"description": "Current Configuration",
"suggestedChanges": [],
"haArchitecture": "BackupAndRestore",
"referenceId": "original"
},
{
"cost": {
"amount": 0.0,
"currency": "USD",
"frequency": "Monthly"
},
"appComponentName": "computeappcomponent-nrz",
"recommendationCompliance": {
"AZ": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": " Estimated time to restore cluster with volumes. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Based on the frequency of the backups"
},
"Hardware": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": " Estimated time to restore cluster with volumes. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Based on the frequency of the backups"
},
"Software": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": " Estimated time to restore cluster with volumes. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Based on the frequency of the backups"
}
},
"optimizationType": "LeastChange",
"description": "Current Configuration",
"suggestedChanges": [],
"haArchitecture": "BackupAndRestore",
"referenceId": "original"
},
{
"cost": {
"amount": 14.74,
"currency": "USD",
"frequency": "Monthly"
},
"appComponentName": "computeappcomponent-nrz",
"recommendationCompliance": {
"AZ": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 0,
"expectedRtoDescription": "No expected downtime. You're launching using EC2, with DesiredCount > 1 in multiple AZs and CapacityProviders with MinSize > 1",
"expectedRpoInSecs": 0,
"expectedRpoDescription": "ECS Service state is saved on Amazon EFS file system. No data loss is expected as objects are be stored in multiple AZs."
},
"Hardware": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 0,
"expectedRtoDescription": "No expected downtime. You're launching using EC2, with DesiredCount > 1 and CapacityProviders with MinSize > 1",
"expectedRpoInSecs": 0,
"expectedRpoDescription": "ECS Service state is saved on Amazon EFS file system. No data loss is expected as objects are be stored in multiple AZs."
},
"Software": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": " Estimated time to restore cluster with volumes. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Based on the frequency of the backups"
}
},
"optimizationType": "BestAZRecovery",
"description": "Stateful Amazon ECS service with launch type Amazon EC2 and Amazon EFS storage, deployed in multiple AZs. AWS Backup is used to backup Amazon EFS and copy snapshots in-Region.",
"suggestedChanges": [
"Add AWS Auto Scaling Groups and Capacity Providers in multiple AZs",
"Change desired count of the setup",
"Remove Amazon EBS volume"
],
"haArchitecture": "BackupAndRestore",
"referenceId": "ecs:config:ec2-multi_az-efs-backups:2022-02-16"
}
]
},
{
"appComponentName": "databaseappcomponent-hji",
"recommendationStatus": "MetCanImprove",
"configRecommendations": [
{
"cost": {
"amount": 0.0,
"currency": "USD",
"frequency": "Monthly"
},
"appComponentName": "databaseappcomponent-hji",
"recommendationCompliance": {
"AZ": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": "Estimated time to restore from an RDS backup. (Estimates are averages based on size, real time may vary greatly from estimate).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Estimate based on the backup schedule. (Estimates are calculated from backup schedule, real time restore may vary)."
},
"Hardware": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": "Estimated time to restore from snapshot. (Estimates are averages based on size, real time may vary greatly from estimate).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Estimate based on the backup schedule. (Estimates are calculated from backup schedule, real time restore may vary)."
},
"Software": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": "Estimated time to restore from snapshot. (Estimates are averages based on size, real time may vary greatly from estimate).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Estimate based on the backup schedule. (Estimates are calculated from backup schedule, real time restore may vary)."
}
},
"optimizationType": "LeastCost",
"description": "Current Configuration",
"suggestedChanges": [],
"haArchitecture": "BackupAndRestore",
"referenceId": "original"
},
{
"cost": {
"amount": 0.0,
"currency": "USD",
"frequency": "Monthly"
},
"appComponentName": "databaseappcomponent-hji",
"recommendationCompliance": {
"AZ": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": "Estimated time to restore from an RDS backup. (Estimates are averages based on size, real time may vary greatly from estimate).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Estimate based on the backup schedule. (Estimates are calculated from backup schedule, real time restore may vary)."
},
"Hardware": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": "Estimated time to restore from snapshot. (Estimates are averages based on size, real time may vary greatly from estimate).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Estimate based on the backup schedule. (Estimates are calculated from backup schedule, real time restore may vary)."
},
"Software": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 1800,
"expectedRtoDescription": "Estimated time to restore from snapshot. (Estimates are averages based on size, real time may vary greatly from estimate).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Estimate based on the backup schedule. (Estimates are calculated from backup schedule, real time restore may vary)."
}
},
"optimizationType": "LeastChange",
"description": "Current Configuration",
"suggestedChanges": [],
"haArchitecture": "BackupAndRestore",
"referenceId": "original"
},
{
"cost": {
"amount": 76.73,
"currency": "USD",
"frequency": "Monthly"
},
"appComponentName": "databaseappcomponent-hji",
"recommendationCompliance": {
"AZ": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 120,
"expectedRtoDescription": "Estimated time to promote a secondary instance.",
"expectedRpoInSecs": 0,
"expectedRpoDescription": "Aurora data is automatically replicated across multiple Availability Zones in a Region."
},
"Hardware": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 120,
"expectedRtoDescription": "Estimated time to promote a secondary instance.",
"expectedRpoInSecs": 0,
"expectedRpoDescription": "Aurora data is automatically replicated across multiple Availability Zones in a Region."
},
"Software": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 900,
"expectedRtoDescription": "Estimate time to backtrack to a stable state.",
"expectedRpoInSecs": 300,
"expectedRpoDescription": "Estimate for latest restorable time for point in time recovery."
}
},
"optimizationType": "BestAZRecovery",
"description": "Aurora database cluster with one read replica, with backtracking window of 24 hours.",
"suggestedChanges": [
"Add read replica in the same Region",
"Change DB instance to a supported class (db.t3.small)",
"Change to Aurora",
"Enable cluster backtracking",
"Enable instance backup with retention period 7"
],
"haArchitecture": "WarmStandby",
"referenceId": "rds:config:aurora-backtracking"
}
]
},
{
"appComponentName": "storageappcomponent-rlb",
"recommendationStatus": "BreachedUnattainable",
"configRecommendations": [
{
"cost": {
"amount": 0.0,
"currency": "USD",
"frequency": "Monthly"
},
"appComponentName": "storageappcomponent-rlb",
"recommendationCompliance": {
"AZ": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 0,
"expectedRtoDescription": "No data loss in your system",
"expectedRpoInSecs": 0,
"expectedRpoDescription": "No data loss in your system"
},
"Hardware": {
"expectedComplianceStatus": "PolicyBreached",
"expectedRtoInSecs": 2592001,
"expectedRtoDescription": "No recovery option configured",
"expectedRpoInSecs": 2592001,
"expectedRpoDescription": "No recovery option configured"
},
"Software": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 900,
"expectedRtoDescription": "Time to recover Amazon EFS from backup. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Recovery Point Objective for Amazon EFS from backups, derived from backup frequency"
}
},
"optimizationType": "BestAZRecovery",
"description": "Amazon EFS with backups configured",
"suggestedChanges": [
"Add additional availability zone"
],
"haArchitecture": "MultiSite",
"referenceId": "efs:config:with_backups:2020-04-01"
},
{
"cost": {
"amount": 0.0,
"currency": "USD",
"frequency": "Monthly"
},
"appComponentName": "storageappcomponent-rlb",
"recommendationCompliance": {
"AZ": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 0,
"expectedRtoDescription": "No data loss in your system",
"expectedRpoInSecs": 0,
"expectedRpoDescription": "No data loss in your system"
},
"Hardware": {
"expectedComplianceStatus": "PolicyBreached",
"expectedRtoInSecs": 2592001,
"expectedRtoDescription": "No recovery option configured",
"expectedRpoInSecs": 2592001,
"expectedRpoDescription": "No recovery option configured"
},
"Software": {
"expectedComplianceStatus": "PolicyMet",
"expectedRtoInSecs": 900,
"expectedRtoDescription": "Time to recover Amazon EFS from backup. (Estimate is based on averages, real time restore may vary).",
"expectedRpoInSecs": 86400,
"expectedRpoDescription": "Recovery Point Objective for Amazon EFS from backups, derived from backup frequency"
}
},
"optimizationType": "BestAttainable",
"description": "Amazon EFS with backups configured",
"suggestedChanges": [
"Add additional availability zone"
],
"haArchitecture": "MultiSite",
"referenceId": "efs:config:with_backups:2020-04-01"
}
]
}
]
}
```
# 修改您的應用程式
AWS Resilience Hub 可讓您編輯應用程式的草稿版本，並將變更發佈至新的 （已發佈） 版本，以修改應用程式資源。 AWS Resilience Hub 會使用您應用程式的已發佈版本，其中包含更新的 資源，以執行彈性評估。
如需詳細資訊，請參閱下列主題：
+ [手動將資源新增至您的應用程式](#manually-add-resource-using-api)
+ [將資源分組到單一應用程式元件](#group-resource-using-api)
+ [從 AppComponent 排除資源](#exclude-resource-using-api)
## 手動將資源新增至您的應用程式
如果資源未部署為輸入來源的一部分， AWS Resilience Hub 可讓您使用 `CreateAppVersionResource` API 手動將資源新增至應用程式。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateAppVersionResource.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_CreateAppVersionResource.html)。
您必須提供下列參數給此 API：
+ 應用程式 Amazon Resource Name (ARN)
+ 資源的邏輯 ID
+ 資源的實體 ID
+ AWS CloudFormation 類型
下列範例示範如何使用 AWS Resilience Hub `CreateAppVersionResource` API 在 中手動將資源新增至您的應用程式。
### 請求
```
aws resiliencehub create-app-version-resource \
--app-arn \
--resource-name "backup-efs" \
--logical-resource-id '{"identifier": "backup-efs"}' \
--physical-resource-id '' \
--resource-type AWS::EFS::FileSystem \
--app-components '["new-app-component"]'
```
### 回應
```
{
"appArn": "",
"appVersion": "draft",
"physicalResource": {
"resourceName": "backup-efs",
"logicalResourceId": {
"identifier": "backup-efs"
},
"physicalResourceId": {
"identifier": "",
"type": "Arn"
},
"resourceType": "AWS::EFS::FileSystem",
"appComponents": [
{
"name": "new-app-component",
"type": "AWS::ResilienceHub::StorageAppComponent",
"id": "new-app-component"
}
]
}
}
```
## 將資源分組到單一應用程式元件
應用程式元件 (AppComponent) 是一組相關 AWS 資源，可做為單一單位運作並失敗。例如，當您有用作待命部署的跨區域工作負載時。 AWS Resilience Hub 具有管理哪些 AWS 資源可以屬於哪種 AppComponent 類型的規則。 AWS Resilience Hub 可讓您使用下列資源管理 APIs 將資源分組到單一 AppComponent。
+ `UpdateAppVersionResource` – 此 API 會更新應用程式的資源詳細資訊。如需此 API 的詳細資訊，請參閱 [UpdateAppVersionResource](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersionResource.html)。
+ `DeleteAppVersionAppComponent` – 此 API 會從應用程式刪除 AppComponent。如需此 API 的詳細資訊，請參閱 [DeleteAppVersionAppComponent](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_DeleteAppVersionAppComponent.html)。
下列範例示範如何使用 AWS Resilience Hub `DeleteAppVersionAppComponent` API 在 中更新應用程式的資源詳細資訊。
### 請求
```
aws resiliencehub delete-app-version-app-component \
--app-arn \
--id new-app-component
```
### 回應
```
{
"appArn": "",
"appVersion": "draft",
"appComponent": {
"name": "new-app-component",
"type": "AWS::ResilienceHub::StorageAppComponent",
"id": "new-app-component"
}
}
```
下列範例顯示如何使用 AWS Resilience Hub `UpdateAppVersionResource` API 刪除在先前範例中建立的空 AppComponent。
### 請求
```
aws resiliencehub delete-app-version-app-component \
--app-arn \
--id new-app-component
```
### 回應
```
{
"appArn": "",
"appVersion": "draft",
"appComponent": {
"name": "new-app-component",
"type": "AWS::ResilienceHub::StorageAppComponent",
"id": "new-app-component"
}
}
```
## 從 AppComponent 排除資源
AWS Resilience Hub 可讓您使用 `UpdateAppVersionResource` API 從評估中排除資源。運算應用程式的彈性時，不會考慮這些資源。如需這種 API 的詳細資訊，請參閱 [https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersionResource.html](https://docs.aws.amazon.com/resilience-hub/latest/APIReference/API_UpdateAppVersionResource.html)。
**注意**
您只能排除從輸入來源匯入的資源。
下列範例顯示如何使用 AWS Resilience Hub `UpdateAppVersionResource` API 在 中排除應用程式的資源。
### 請求
```
aws resiliencehub update-app-version-resource \
--app-arn \
--resource-name "ec2instance-nvz" \
--excluded
```
### 回應
```
{
"appArn": "",
"appVersion": "draft",
"physicalResource": {
"resourceName": "ec2instance-nvz",
"logicalResourceId": {
"identifier": "ec2",
"terraformSourceName": "test.state.file"
},
"physicalResourceId": {
"identifier": "i-0b58265a694e5ffc1",
"type": "Native",
"awsRegion": "us-west-2",
"awsAccountId": "123456789101"
},
"resourceType": "AWS::EC2::Instance",
"appComponents": [
{
"name": "computeappcomponent-nrz",
"type": "AWS::ResilienceHub::ComputeAppComponent"
}
]
}
}
```