Trusted Advisor  sandbox 

Pre-requisites

Full access with Business/Enterprise support plan, otherwise full access to service limit checks, and 6 security checks.

This applies to accounts in an org as well. If the management account has Enterprise access, but the member account only has a Basic support plan, full checks for the member account will not be available.

Features

  • Checks are refreshed automatically every week, you can force a manual refresh as well for all or a specific check (api/console)
  • Configure upto 50 reports with region/OU filters etc.

Priority

Focus on the “important” stuff. There are huge amount of recommendations to go through otherwise

  • Sources of Priority recommendations -
    • AWS services like Security Hub, Trusted Advisor, Well-Architected
    • Admin team can add priority recommendations manually from the Organization management account