View a markdown version of this page

Discovery component - Workload Discovery on AWS

Discovery component

The discovery component is the main data-gathering element of the Workload Discovery on AWS architecture. It is responsible for querying AWS Config and making describe API calls to maintain the inventory of resources and their relationships between one another.

Workload Discovery on AWS discovery component

workload discovery discovery component

This solution configures Amazon ECS to run an AWS Fargate task using the container image downloaded from Amazon ECR. The AWS Fargate task is scheduled to run at 15-minute intervals. The resource relationship data that is collected is inserted into an Amazon Neptune graph database and Amazon OpenSearch Service.

The discovery component workflow consists of the following three steps:

  1. Amazon ECS invokes an AWS Fargate task at 15-minute intervals.

  2. The Fargate task gathers resource data from AWS Config, AWS API describe calls, and from the Amazon Neptune database.

  3. The Fargate task calculates the difference between what is present in the Amazon Neptune database and what it has received from AWS Config and the describe calls.

  4. The Fargate task sends requests to the AppSync API to persist the changes to resources and relationships discovered into Amazon Neptune and Amazon OpenSearch Service.