AWS Trusted Advisor recommendations - Commands & Configuration

Introduction

AWS Trusted Advisor helps you find ways to improve your cloud setup. It checks your AWS resources and gives advice to save money, improve security, and increase performance.

When you want to find unused or underused resources to save costs.

When you need to check if your AWS setup follows security best practices.

When you want to improve the speed and reliability of your applications.

When you want to make sure your AWS limits are not exceeded.

When you want a simple report to understand your AWS environment health.

Commands

This command lists all the Trusted Advisor checks available in English. It helps you see what areas Trusted Advisor can review.

Terminal

aws support describe-trusted-advisor-checks --language en

Expected Output

{"checks":[{"id":"eW7HH0l7J9","name":"Service Limits","category":"Service Limits"},{"id":"i-1234567890abcdef0","name":"Security Groups - Specific Ports Unrestricted","category":"Security"}]}

→

--language - Sets the language for the check names and descriptions.

This command shows the results of the Service Limits check. It tells you if you are close to AWS service limits that could block your resources.

Terminal

aws support describe-trusted-advisor-check-result --check-id eW7HH0l7J9 --language en

Expected Output

{"result":{"status":"ok","resourcesSummary":{"resourcesProcessed":10,"resourcesFlagged":0},"categorySpecificSummary":{"serviceLimits":{"limitName":"EC2 Instances","max":20,"current":5}}}}

→

--check-id - Specifies which Trusted Advisor check to get results for.

→

--language - Sets the language for the output.

This command requests AWS to refresh the results of the Service Limits check. It ensures you get the latest advice.

Terminal

aws support refresh-trusted-advisor-check --check-id eW7HH0l7J9

Expected Output

{"status":"success"}

→

--check-id - Specifies which Trusted Advisor check to refresh.

Key Concept

If you remember nothing else from this pattern, remember: AWS Trusted Advisor gives you easy-to-understand advice to improve your AWS setup by checking your resources and usage.

Common Mistakes

Trying to use Trusted Advisor commands without AWS Support plan.

Trusted Advisor requires a Business or Enterprise Support plan to access most checks.

Make sure your AWS account has the right Support plan before running Trusted Advisor commands.

Not refreshing the Trusted Advisor checks before reading results.

Results may be outdated and not reflect recent changes in your AWS resources.

Always run the refresh command before fetching check results to get current advice.

Using incorrect check IDs when requesting results or refresh.

The commands will fail or return no data if the check ID is wrong.

List available checks first and copy the exact check ID to use in commands.

Summary

Use 'aws support describe-trusted-advisor-checks' to list all available Trusted Advisor checks.

Use 'aws support describe-trusted-advisor-check-result' with a check ID to see detailed advice.

Use 'aws support refresh-trusted-advisor-check' to update the check results before viewing them.