本文介绍了如何利用Amazon Q Business这一生成式AI助手，高效地识别、优先处理和解决AWS Trusted Advisor报告中发现的风险。Trusted Advisor提供成本优化、安全增强、基础设施弹性等方面的深入见解，但手动处理大量风险可能具有挑战性。通过将Amazon Q Business与Trusted Advisor数据集成，并结合Jira等工具，用户可以更快速地获取可操作的洞察，并采取有针对性的措施，从而降低潜在的业务影响。

💡Amazon Q Business是一个由生成式AI驱动的助手，它能基于企业系统中的数据和信息回答问题、提供摘要、生成内容并安全地完成任务，从而提高员工的创造力、数据驱动能力和生产力。

🛡️Trusted Advisor会持续评估AWS环境，并根据云成本优化、性能、弹性、安全性、卓越运营和服务限制等类别中的最佳实践检查结果，提出改进建议，帮助用户优化成本、提高性能、增强安全性和弹性，并在云中大规模运营。

✅通过集成Jira与Amazon Q Business，用户可以使用自然语言轻松创建Jira任务，从而将洞察转化为实际行动，更有效地解决Trusted Advisor报告中发现的问题。

⚙️解决方案的关键组件包括AWS IAM Identity Center（作为身份提供商）、Amazon Q Business（用于创建直观的聊天界面）、Trusted Advisor详细报告（Excel或CSV文件）以及Jira集成（用于创建Jira任务）。

Our customers’ key strategic objectives are cost savings and building secure and resilient infrastructure. At AWS, we’re dedicated to helping you meet these critical goals with our unparalleled expertise and industry-leading tools. One of the most valuable resources we offer is the AWS Trusted Advisor detailed report, which provides deep insights into cost optimization, security enhancement, infrastructure resilience, performance optimization, and service limit management. This comprehensive analysis is invaluable for customers of all sizes and across diverse business units and teams. However, the complexity of modern cloud environments can make it challenging to efficiently identify, prioritize, and address the hundreds of Trusted Advisor risks (and each risk might have thousands of affected resources) that might be impacting your operations.

In this post, we demonstrate how Amazon Q Business can empower you to efficiently identify, prioritize, and address Trusted Advisor risks.

Amazon Q Business is a generative AI–powered assistant that can answer questions, provide summaries, generate content, and securely complete tasks based on data and information in your enterprise systems. It empowers employees to be more creative, data-driven, efficient, prepared, and productive.

Trusted Advisor helps you optimize costs, increase performance, improve security and resilience, and operate at scale in the cloud. Trusted Advisor continuously evaluates your AWS environment using best practice checks across the categories of cloud cost optimization, performance, resilience, security, operational excellence, and service limits, and it recommends actions to remediate deviations from best practices.

Jira is a project management and issue tracking tool that helps teams plan, track, and manage work. By integrating Jira with Amazon Q Business, you can effortlessly create Jira tasks using natural language.

By taking advantage of the capabilities of Amazon Q Business, you can gain faster and more actionable insights into your detailed Trusted Advisor data. This can enable you to proactively take targeted actions on Trusted Advisor risks that could otherwise significantly impact your business.

Solution overview

The solution uses the following components:

AWS IAM Identity Center serves as our SAML 2.0-compliant identity provider (IdP). Make sure you have enabled an IAM Identity Center instance, provisioned at least one user, and provided each user with a valid email address. For more details, see Configure user access with the default IAM Identity Center directory. Amazon Q Business empowering you to create intuitive chat interfaces so users can access and interpret data insights through natural language conversations. Trusted Advisor detailed report data in an Excel or CSV file. Jira integration to create Jira tasks.

The following diagram illustrates the solution architecture.

Prerequisites

Complete the following prerequisite steps:

Set up Amazon Q Business. Configure an IAM Identity Center instance. Create IAM Identity Center users and groups. Have a Trusted Advisor detailed report (Excel or CSV). Have the following Jira resources:
A Jira account URL (site base URL) from your Jira account settings. For example, https://company.atlassian.net/ Access to the Jira Developer Console. A Jira project for creating Jira tasks.

Create the Amazon Q Business application

Complete the following steps to create the Amazon Q Business application:

On the Amazon Q Business console, choose Create application. For Application name, enter a name (for example, TrustedAdvisorGenAIApplication). For Access management method, IAM Identity Center is the recommended method. You can also use the other option available: AWS IAM Identity Provider. For Quick Start user, use the Select User dropdown menu to choose either an individual user or a group containing the users you want to use the application with. Choose a subscription for users or groups using the Select Subscription dropdown menu. Expand Application details, and for Choose a method to authorize Amazon Q Business, select Create and use a new service-linked role (SLR). For Web experience settings in Choose a method to authorize Amazon Q Business, select Create and use a new service role, or you can also use an existing role by using the option Use an existing service role. Refer to IAM roles for Amazon Q Business for more details. Choose Create.

After the application is created, you will see application details similar to those in the following screenshot.

Make note of the value for Deployed URL because you will use it to chat with Amazon Q Business.

Create an index

Indexing in Amazon Q Business is done before configuring the data sources to establish a secure and organized framework for data management. This pre-configuration makes sure proper access controls are in place and creates an efficient structure for categorizing and retrieving information, similar to creating a library’s organizational system before adding books.

Complete the following steps to enable indexing:

On the application details page, choose Data sources. Choose Add an index. For Index name, enter a name for your index. For Index provisioning, select an index option:
Enterprise is ideal for production workloads that are deployed in a Multi-AZ setup for enhanced fault tolerance. Starter is ideal for workloads such as proofs of concept, development, and testing that are deployed in a single Availability Zone.
For Units, enter the number of units depending on your needs. Choose Add an index.

Under Data sources, you will see the index has been added and is active.

Configure a data source

Now that you created an index, you can add a data source. Complete the following steps:

Under Data sources, choose Add data source. Choose Upload files, because we will be using a spreadsheet. Other data source options are available, which you can select depending on your business requirements. Choose the file you want to upload using Choose files. Choose Upload.

Amazon Q Business can handle embedded tables in PDF, Word, HTML, and tables in CSV and Excel.

Choose Done.

You will see that the file has been successfully uploaded.

The following screenshot is a sample of a few rows and columns that are part of the dataset.

To get the detailed Trusted Advisor report, you can coordinate with your technical account managers or refer to Organizational view for AWS Trusted Advisor to understand the prerequisites and steps for generating a similar report.

Configure the Jira Cloud plugin

In this section, we walk through the steps to set up Jira Cloud and the Jira plugin.

Set up Jira Cloud

Complete the following steps to set up Jira Cloud:

Access the Jira Cloud Developer console. Choose Create and choose OAuth 2.0 integration from the dropdown menu.
Enter a name and choose Create.
On the Permissions tab, choose Add under Action for Jira API and then choose Configure.

Edit scopes (Classic and Granular) to add the following required scopes:
read:jira-work write:jira-work manage:jira-project read:sprint:jira-software write:sprint:jira-software delete:sprint:jira-software read:board-scope:jira-software read:project:jira



On the Authorization tab, for Callback URL, enter <q-web-url-endpoint>/oauth/callback.

Set up the Jira plugin

Gather the following information, which will be needed to set up the Jira plugin:

Domain URL of your Jira Cloud instance: https://api.atlassian.com/ex/jira/<Instance ID>, where the instance ID is retrieved using https://<your namespace>.atlassian.net/_edge/tenant_info Access token URL: https://auth.atlassian.com/oauth/token Authorization URL: https://auth.atlassian.com/authorize Client ID and secret from your OAuth 2.0 application: To get the client ID and secret, navigate to the Settings tab from your OAuth 2.0 application

Complete the following steps to set up the Jira plugin:

On the Amazon Q Business console, navigate to your application. In the navigation pane, under Actions, choose Plugins.
Choose Add plugin. Choose the plus sign for Jira Cloud.
Enter a name for Plugin name and a URL for Domain URL.
Under OAuth2.0 authorization, select Create and use a new secret. Enter values for Secret name, Client ID, Client secret, and Redirect URL, then choose Create.
For Service access, select Create and use a new service role.
Choose Add.

The Jira plugin will be added, as shown in the following screenshot.

Customize the web experience

You can choose Customize web experience and change the title, subtitle, and welcome message. Also, you can display sample prompts by selecting Display sample prompts.

Now, when you open the application, it will show you the title, subtitle, and welcome message you set.

Access the Amazon Q application’s web experience endpoint

In the next steps, we interact with the chat interface of the TrustedAdvisorGenAIApplication application to get faster insights and make it actionable by creating a Jira task.

On the Amazon Q Business console, navigate to the TrustedAdvisorGenAIApplication application. In the Web experience settings section, copy the deployed URL of the application. This will be the UI of Amazon Q application, as shown in the following screenshot.

Interact with the Amazon Q application

Now, let’s see the TrustedAdvisorGenAIApplication application in action.

We enter the following prompt to get insights: “Top 5 Lambda functions with Function Name from Lambda over-provisioned functions for memory size.”

The following screenshot shows the prompt output given by our Amazon Q Business application.

We got the insights we wanted, but insights alone aren’t enough—we need to transform that knowledge into tangible results. Amazon Q Business has features where you can use plugins with powerful project management tools (like Jira), streamlining remediation efforts and enabling maximum impact.

Let’s ask the Amazon Q Business application to create a Jira task using the preceding output information. We use the following prompt and ask Amazon Q to create a Jira task with the insights we got earlier: “Using the above important function details, create a JIRA task in amazonqbusiness project.”

During the first use of the Jira plugin, Amazon Q Business will authenticate the user through the Jira login interface, as shown in the following screenshot. For users who have already authenticated through enterprise single sign-on (SSO) or directly using their Jira login, only an API access approval will be requested.

Choose Authorize and then choose Accept.

The application will ask for details to create the Jira task. Enter information if needed and choose Submit. The Amazon Q Business application will create the task in the Jira project you specified.

You will see that the Jira task has been created, as shown in the following screenshot.

Queries will be automatically routed to the plugins you have configured. Users will not need to invoke a plugin in the conversation window and then run the queries.

Clean up

After you’re done testing the solution, you can delete the resources to avoid incurring charges. Follow the instructions in Managing Amazon Q Business applications to delete the application. See Amazon Q Business pricing for more pricing information.

Conclusion

In this post, we showed how to create an application using Amazon Q Business with Jira integration that used a dataset containing a Trusted Advisor detailed report. This solution demonstrates how to use new generative AI services like Amazon Q Business to get data insights faster and make them actionable.

You can expand this solution to use other data sources and use natural language to get data insights faster, which will help you make data-driven decisions.

To learn more about Amazon Q, see the Amazon Q main product page, Amazon Q Developer, and Getting started with Amazon Q. Additionally, check out the following blog posts:

Accelerate application upgrades with Amazon Q Developer agent for code transformation Elevate workforce productivity through seamless personalization in Amazon Q Business Build a generative AI assistant to enhance employee experience using Amazon Q Business Build private and secure enterprise generative AI applications with Amazon Q Business using IAM Federation Enabling generative AI for better customer experience can be easy with Amazon Connect

---

About the author

Satish Bhonsle is a Senior Technical Account Manager at AWS. He is passionate about customer success and technology. He loves working backwards by quickly understanding strategic customer objectives, aligning them to software capabilities and effectively driving customer success.