search

turbot / steampipe-mod-aws-well-architected

Are AWS Well-Architected best practices being followed? Use Powerpipe and Steampipe to check if your AWS accounts are following best practices from each lens and pillar.
https://hub.powerpipe.io/mods/turbot/aws_well_architected
Apache License 2.0
11 stars 8 forks source link

AWS Well Architected Framework - Reliability Pillar #24

Closed vishalgoyal16444 closed 1 year ago

vishalgoyal16444 commented 1 year ago

I was reading through this AWS documentation which has following 13 rules provided https://docs.aws.amazon.com/wellarchitected/latest/reliability-pillar/welcome.html

• REL01 - Manage service quotas and constraints • REL02 - Plan your network topology • REL03 - Design your workload service architecture • REL04 - Design interactions in a distributed system to prevent failures • REL05 - Design interactions in a distributed system to mitigate or withstand failures • REL06 - Monitor workload resources • REL07 - Design your workload to adapt to changes in demand • REL08 - Implement change • REL09 - Back up data • REL10 - Use fault isolation to protect your workload • REL11 - Design your workload to withstand component failures • REL12 - Test reliability • REL13 - Plan for Disaster Recovery (DR)

If i look at steampipe documentation, it has following covered. Few of the above ones are related to design which steampipe may not address, but REL10, REL11 look relevant for steampipe to cover is my view. Wanted to check how do we ensure good coverage for each of the WAF pillars in steampipe ?

• REL01 How do you manage service quotas and constraints? • REL02 How do you plan your network topology? • REL06 How do you monitor workload resources? • REL07 How do you design your workload to adapt to changes in demand? • REL08 How do you implement change? • REL09 How do you back up data?

karanpopat commented 1 year ago

Hey @vishalgoyal16444, welcome to Steampipe! Thanks for your interest in the Well-Architected Mod. We're actively working on adding more rules to the list soon. We'll definitely keep you in the loop regarding any updates.

In the meantime, we'd love to hear your thoughts on how you feel about the current coverage. Feel free to share your feedback!

vishalgoyal16444 commented 1 year ago

Thank you for quick response. We want to leverage steampipe for doing real customer related work and want to ensure customers see value for which it is important to note what is the coverage it offers compared to rules from hyper scalers.

Regards, Vishal

From: Karan Popat @.> Sent: Monday, May 29, 2023 7:01 PM To: turbot/steampipe-mod-aws-well-architected @.> Cc: Vishal Goyal @.>; Mention @.> Subject: Re: [turbot/steampipe-mod-aws-well-architected] AWS Well Architected Framework - Reliability Pillar (Issue #24)

Hey @vishalgoyal16444https://github.com/vishalgoyal16444, welcome to Steampipe! Thanks for your interest in the Well-Architected Mod. We're actively working on adding more rules to the list soon. We'll definitely keep you in the loop regarding any updates.

In the meantime, we'd love to hear your thoughts on how you feel about the current coverage. Feel free to share your feedback!

— Reply to this email directly, view it on GitHubhttps://github.com/turbot/steampipe-mod-aws-well-architected/issues/24#issuecomment-1567144948, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ARUATTO7EFISMZRVAM6JCA3XISQMTANCNFSM6AAAAAAYSUISJQ. You are receiving this because you were mentioned.Message ID: @.***>

cbruno10 commented 1 year ago

Hi @vishalgoyal16444 , thanks for checking out the mod and raising this issue!

Our current approach for this mod is to lay the benchmark foundations and then add some mappings based off of our AWS Compliance mod queries, as we we can just reference them in this mod easily. For additional coverage, our plan is to add them over time, but we'd really like community feedback based on checks they run today, how they ensure they're meeting best practices in each pillar, and if they use any existing mappings today that we can also use reference.

Do you run any checks today for the Reliability pillar questions and best practices today? If so, are you able to share what those checks are? Also, do you see any of those already being done in AWS Compliance mod queries?

If you have any direct suggestions for new question and best practice mappings to existing queries, or you'd like to add new queries to this mod, we are also open to receiving PRs!

bigdatasourav commented 1 year ago

Hey @vishalgoyal16444, We are closing this issue because we have not heard from you. Please feel free to reopen the issue if you want to share or discuss anything.