Configure AWS Config
Spotter uses AWS Config to gather data about your resources.
-
Enable AWS Config in one of your AWS accounts
-
Create an aggregator and note the name e.g.
organization-aggregator -
Configure the aggregator to gather data from every account and region. Read more
It’s advised to create a separate config account in to your environment
Configure Security Hub
-
Enable Security Hub in one of your AWS accounts
-
Configure it to gather data from every account and region
It’s advised to create a separate security account in to your environment
Create CUR 2 export to enable cost data
Configure Cost Explorer
-
Enable rightsizing recommendations from Cost Explorer of the management account. https://docs.aws.amazon.com/cost-management/latest/userguide/ce-rightsizing.html#rr-getting-started
Best Practises
-
Enable Security Hub and Trusted Advisor in all accounts in your environment
-
Enable at least Business Support Plan in all accounts in production