Skip to main content

Amazon Managed Grafana - FAQ

Why should I choose Amazon Managed Grafana?

High Availability: Amazon Managed Grafana workspaces are highly available with multi-az replication. Amazon Managed Grafana also continuously monitors for the health of workspaces and replaces unhealthy nodes, without impacting access to the workspaces. Amazon Managed Grafana manages the availability of compute and database nodes so customers don’t have to manage the infrastructure resources required for the administration & maintenance.

Data Security: Amazon Managed Grafana encrypts the data at rest without any special configuration, third-party tools, or additional cost. Data in-transit area also encrypted via TLS.

Which AWS regions are supported?

Current list of supported Regions is available in the Supported Regions section in the documentation.

We have multiple AWS accounts in multiple regions in our Organization, does Amazon Managed Grafana work for these scenarios

Amazon Managed Grafana integrates with AWS Organizations to discover AWS accounts and resources in Organizational Units (OUs). With AWS Organizations customers can centrally manage data source configuration and permission settings for multiple AWS accounts.

What data sources are supported in Amazon Managed Grafana?

Data sources are storage backends that customers can query in Grafana to build dashboards in Amazon Managed Grafana. Amazon Managed Grafana supports about 30+ built-in data sources including AWS native services like Amazon CloudWatch, Amazon OpenSearch Service, AWS IoT SiteWise, AWS IoT TwinMaker, Amazon Managed Service for Prometheus, Amazon Timestream, Amazon Athena, Amazon Redshift, AWS X-Ray and many others. Additionally, about 15+ other data sources are also available for upgraded workspaces in Grafana Enterprise.

Data sources of my workloads are in private VPCs. How do I connect them to Amazon Managed Grafana securely?

Private data sources within a VPC can be connected to Amazon Managed Grafana through AWS PrivateLink to keep the traffic secure. Further access control to Amazon Managed Grafana service from the VPC endpoints can be restricted by attaching an IAM resource policy for Amazon VPC endpoints.

What User Authentication mechanism is available in Amazon Managed Grafana?

In Amazon Managed Grafana workspace, users are authenticated to the Grafana console by single sign-on using any IDP that supports Security Assertion Markup Language 2.0 (SAML 2.0) or AWS IAM Identity Center (successor to AWS Single Sign-On).

Related blog: Fine-grained access control in Amazon Managed Grafana using Grafana Teams

What kind of automation support is available for Amazon Managed Grafana?

Amazon Managed Grafana is integrated with AWS CloudFormation, which helps customers in modeling and setting up AWS resources so that customers can spend less time creating and managing resources and infrastructure in AWS. With AWS CloudFormation customers can reuse templates to set up Amazon Managed Grafana resources consistently and repeatedly. Amazon Managed Grafana also has APIavailable which supports customers in automating through AWS CLI or integrating with software/products. Amazon Managed Grafana workspaces has HTTP APIs for automation and integration support.

Related blog: Announcing Private VPC data source support for Amazon Managed Grafana

My Organization uses Terraform for automation. Does Amazon Managed Grafana support Terraform? Yes, Amazon Managed Grafana supports Terraform for automation

Example: Reference implementation for Terraform support

I am using commonly used Dashboards in my current Grafana setup. Is there a way to use them on Amazon Managed Grafana rather than re-creating again?

Amazon Managed Grafana supports HTTP APIs that allow you to easily automate deployment and management of Dashboards, users and much more. You can use these APIs in your GitOps/CICD processes to automate management of these resources.

Does Amazon Managed Grafana support Alerts?

Amazon Managed Grafana alerting provides customers with robust and actionable alerts that help learn about problems in the systems in near real time, minimizing disruption to services. Grafana includes access to an updated alerting system, Grafana alerting, that centralizes alerting information in a single, searchable view.

My Organization requires all actions be recorded for audits. Can Amazon Managed Grafana events be recorded?

Amazon Managed Grafana is integrated with AWS CloudTrail, which provides a record of actions taken by a user, a role, or an AWS service in Amazon Managed Grafana. CloudTrail captures all API calls for Amazon Managed Grafanaas events. The calls that are captured include calls from the Amazon Managed Grafana console and code calls to the Amazon Managed Grafana API operations.

What more information is available?

For additional information on Amazon Managed Grafana customers can read the AWS Documentation, go through the AWS Observability Workshop on Amazon Managed Grafana and also check the product page to know the features, pricing details, latest blog posts and videos.

Product FAQ https://aws.amazon.com/grafana/faqs/