TECH **AWS Trusted Advisor vs. AWS Health Dashboard: Zero-Fluff, Hands-On Guide**

AWS Trusted Advisor vs. AWS Health Dashboard: Zero-Fluff, Hands-On Guide

(For AWS Solutions Architect – Associate & Real-World Cloud Engineers)

1. What This Is & Why It Matters

You’re a cloud engineer at a mid-sized SaaS company. Your CTO just asked: "Why did our RDS instance fail last night? And why are we paying $2K/month for unused EBS volumes?"

You could dig through CloudWatch logs, manually audit every resource, and hope you catch everything—or you could use AWS Trusted Advisor and AWS Health Dashboard to get instant, actionable insights.

• Trusted Advisor = Your proactive cloud auditor. It scans your AWS environment for cost waste, security gaps, performance bottlenecks, and reliability risks and tells you exactly how to fix them.
• AWS Health Dashboard = Your real-time incident commander. It tells you what’s broken right now (e.g., "us-east-1 RDS outage") and what AWS is doing to fix it.

Why this matters in production:
- Ignoring Trusted Advisor? You’ll waste 30-50% of your AWS bill on unused resources (EBS volumes, idle EC2 instances, over-provisioned RDS).
- Ignoring AWS Health Dashboard? You’ll blame your team for outages that are AWS’s fault (e.g., a regional S3 outage) and waste hours troubleshooting.
- Using both correctly? You’ll cut costs, prevent security breaches, and respond to incidents faster—without manual audits.

Real-world scenario:
You inherit a legacy AWS account with 100+ EC2 instances, 50 RDS databases, and 200 S3 buckets. Your boss wants: 1. A cost reduction plan (cut waste by 40%).
2. A security hardening report (fix public S3 buckets, open security groups).
3. A real-time alert system for AWS outages affecting your workloads.

You’ll use Trusted Advisor for #1 and #2, and AWS Health Dashboard for #3.

2. Core Concepts & Components

Trusted Advisor

AWS Health Dashboard

3. Step-by-Step Hands-On: Setting Up Trusted Advisor & AWS Health Dashboard

Prerequisites

✅ AWS account with IAM admin permissions (or at least TrustedAdvisorReadOnlyAccess and HealthReadOnlyAccess).
✅ AWS CLI installed (aws --version to verify).
✅ Business or Enterprise Support (for full Trusted Advisor checks—free tier is limited).

Task 1: Run a Trusted Advisor Check & Fix Cost Waste

Goal: Find and delete unused EBS volumes costing you $50/month.

Step 1: Run a Trusted Advisor Check (Console)

1. Go to AWS Trusted Advisor → Cost Optimization.
2. Look for "Low Utilization Amazon EC2 Instances" and "Unattached EBS Volumes".
3. Example output:
   ```
   Unattached EBS Volumes: 5 (Monthly cost: $48.75)
4. vol-0123456789abcdef0 (gp2, 100GB, $12.50/month)
5. vol-0abcdef1234567890 (gp3, 50GB, $5.00/month)
   ```

Step 2: Delete Unattached EBS Volumes (CLI)

# List all unattached EBS volumes
aws ec2 describe-volumes --filters Name=status,Values=available --query "Volumes[*].{ID:VolumeId,Size:Size,Type:VolumeType}" --output table

# Delete a specific volume (replace vol-1234567890)
aws ec2 delete-volume --volume-id vol-0123456789abcdef0

Expected output:

{
    "Return": true
}

Step 3: Verify Savings

1. Go to AWS Cost Explorer → Monthly costs by service.
2. Before: $2,100 (EBS)
3. After: $2,051 (EBS) → $49 saved.

Task 2: Set Up AWS Health Dashboard Alerts

Goal: Get Slack alerts when AWS has an outage affecting your resources.

Step 1: Enable Personal Health Dashboard (PHD)

1. Go to AWS Health Dashboard → Your Account Health.
2. Click "Enable Personal Health Dashboard".

Step 2: Create an EventBridge Rule for AWS Health Events

# Create a rule to trigger on AWS Health events
aws events put-rule \
    --name "AWSHealthAlerts" \
    --event-pattern '{
        "source": ["aws.health"],
        "detail-type": ["AWS Health Event"]
    }' \
    --state "ENABLED"

# Add a target (e.g., SNS topic for Slack)
aws events put-targets \
    --rule "AWSHealthAlerts" \
    --targets "Id"="1","Arn"="arn:aws:sns:us-east-1:123456789012:SlackAlerts"

Expected output:

{
    "FailedEntryCount": 0,
    "FailedEntries": []
}

Step 3: Test the Alert (Simulate an Outage)

1. Go to AWS Health Dashboard → Service Health.
2. Find a past outage (e.g., "EC2 degraded performance in us-east-1").
3. Check Slack—you should see:
   ? AWS Health Alert: EC2 degraded performance in us-east-1 (affects your instances: i-1234567890)

4. ? Production-Ready Best Practices

Security

• Restrict Trusted Advisor access to only cloud admins (TrustedAdvisorReadOnlyAccess).
• Rotate IAM keys if Trusted Advisor flags them as unused for 90+ days.
• Enable AWS Health API encryption (use KMS for sensitive event data).

Cost Optimization

• Run Trusted Advisor weekly (automate with Lambda + EventBridge).
• Set up billing alerts for unexpected cost spikes (Trusted Advisor doesn’t catch everything).
• Delete "zombie" resources (EBS volumes, ENIs, snapshots) within 7 days of detection.

Reliability & Maintainability

• Tag all resources (Trusted Advisor can’t track untagged resources).
• Exclude false positives (e.g., a "unused" EBS volume that’s a backup).
• Document fixes (e.g., "Deleted vol-1234567890 on 2023-10-20—was unattached for 6 months").

Observability

• Monitor Trusted Advisor checks in CloudWatch (e.g., "Number of open security findings").
• Set up SNS alerts for critical AWS Health events (e.g., RDS failover).
• Log all AWS Health events in CloudTrail for auditing.

5. ⚠️ Common Mistakes & Traps

6. ? Exam/Certification Focus (AWS SAA-C03)

Typical Question Patterns

1. "Which service helps you identify unused EBS volumes?"
2. ✅ Trusted Advisor (Cost Optimization)

3. ❌ AWS Health Dashboard (only shows outages, not cost waste)

4. "Your RDS instance is failing, but AWS Service Health shows no outages. What should you check?"

5. ✅ AWS Health Dashboard → Your Account Health (shows account-specific issues)

6. ❌ Trusted Advisor (doesn’t show real-time failures)

7. "How can you get alerts when AWS has an outage affecting your resources?"

8. ✅ AWS Health API + EventBridge + SNS
9. ❌ Trusted Advisor (only shows misconfigurations, not outages)

Key ⚠️ Trap Distinctions

Common Scenario-Based Question

"You need to reduce AWS costs by 30% without impacting performance. Which service should you use?"
- ✅ Trusted Advisor (Cost Optimization checks)
- ❌ AWS Health Dashboard (doesn’t help with cost) - ❌ AWS Budgets (only alerts on spending, doesn’t find waste)

Why?
- Trusted Advisor identifies specific waste (e.g., "Delete these 5 EBS volumes").
- AWS Budgets only alerts you when you’re over budget—it doesn’t tell you why.

7. ? Hands-On Challenge (With Solution)

Challenge

You’re a cloud engineer at a startup. Your CTO says: "Our AWS bill is $5K/month, but we only have 10 EC2 instances. Find the waste and delete it—without breaking anything."

Your task:
1. Use Trusted Advisor to find cost-saving opportunities.
2. Delete 3 unused resources (EBS volumes, snapshots, or idle EC2).
3. Verify the savings in Cost Explorer.

Solution

1. Run Trusted Advisor → Cost Optimization (find "Unattached EBS Volumes" and "Low Utilization EC2 Instances").
2. Delete 3 unattached EBS volumes (use CLI or console).
   bash
aws ec2 delete-volume --volume-id vol-0123456789abcdef0
aws ec2 delete-volume --volume-id vol-0abcdef1234567890
aws ec2 delete-volume --volume-id vol-9876543210fedcba
3. Check Cost Explorer → Monthly costs by service → EBS.
4. Before: $1,200
5. After: $900 → $300 saved (25% reduction in EBS costs).

Why it works:
- Trusted Advisor flags unused resources that AWS billing doesn’t.
- Deleting unattached EBS volumes = instant cost savings (no downtime).

8. ? Rapid-Reference Crib Sheet

Trusted Advisor

AWS Health Dashboard

9. ? Where to Go Next

1. AWS Trusted Advisor Documentation – Full list of checks.
2. AWS Health Dashboard Documentation – How to set up PHD.
3. Automating Trusted Advisor with Lambda – Real-world automation example.
4. AWS Health API Reference – For EventBridge integrations.