Search for Well Architected Advice
< All Topics
Print

Resources have identified owners

Assigning ownership to resources ensures accountability, efficiency, and effective management of workloads. Identified owners are responsible for critical functions such as change control, troubleshooting, and governance of workloads, accounts, infrastructure, platforms, and applications. Clearly defined ownership helps maintain operational clarity and supports successful business outcomes by ensuring that all resources are actively managed according to their importance to the business.

Define Ownership for Resources

  • Assign Resource Owners: Identify owners for each resource within your workloads, including accounts, infrastructure components, applications, and services. Ownership can be based on roles or specific individuals responsible for managing, maintaining, and optimizing the resource.
  • Categorize Resources Based on Business Value: Categorize resources by their value and criticality to business operations. High-value or mission-critical resources should have dedicated owners to ensure that they receive the necessary attention for maintenance, optimization, and availability.

Ownership Responsibilities

  • Change Control and Configuration Management: Resource owners are responsible for managing changes to their resources, including approval, planning, implementation, and validation of changes. This ensures that changes are carefully evaluated, tested, and implemented without disrupting business operations.
  • Monitoring and Troubleshooting: Owners must monitor resource performance and be responsible for identifying, troubleshooting, and resolving issues. Tools like AWS CloudWatch or AWS Systems Manager can be used to help resource owners monitor health and resolve incidents.
  • Governance and Compliance: Resource owners ensure that their resources comply with governance and compliance standards. This includes implementing security measures, auditing access, and enforcing policies to protect resources from misuse or unauthorized access.

Record Ownership Information

  • Centralized Resource Register: Maintain a centralized register of resources that includes information on their ownership. This helps in identifying who is responsible for each resource and facilitates faster response during incidents or planned changes.
  • Attach Metadata to Resources: Use tags or metadata to identify owners directly in the cloud environment. For example, use AWS tags to add information such as owner name, department, and business unit. This helps in managing resources at scale and simplifies ownership tracking.

Examples of Assigning Resource Ownership

  • Workloads and Applications: Assign ownership to specific teams for each application or workload. The owner is responsible for monitoring application performance, ensuring availability, and coordinating changes.
  • Infrastructure Components: Assign specific owners for different infrastructure components, such as databases, networks, or compute instances. This ensures accountability for maintaining uptime, optimizing resource usage, and managing access.
  • Cloud Accounts and Subscriptions: Assign ownership for AWS accounts or subscriptions to a team responsible for managing costs, security, and access control. Owners ensure that accounts are in compliance with organizational standards.

Align Ownership with Business Goals

  • Shared Goals Across Teams: Ensure that ownership aligns with business outcomes and shared goals between teams. Resource owners need to understand how their responsibilities impact other teams and how their work contributes to overall business success.
  • Authority and Decision-Making: Clearly define the decision-making authority for each resource owner. Resource owners must have the authority to make changes or decisions about their resources, such as approving deployments, implementing optimizations, or managing costs.

Review and Update Ownership Regularly

  • Adapt Ownership Based on Changes: As workloads evolve, periodically review and update resource ownership to ensure alignment with current business needs. Resource ownership should be reassigned if teams restructure or if resources change in value or criticality to the business.
  • Communication and Transparency: Maintain transparency in resource ownership by ensuring that ownership information is accessible to relevant teams. This helps streamline collaboration and ensures that everyone knows who to contact for specific resources.

Supporting Questions:

  • How are resource owners assigned for different components of your workload?
  • What mechanisms are in place to track and document ownership information for resources?
  • How do resource owners ensure that changes, monitoring, and compliance are effectively managed?

Roles and Responsibilities:

Resource Owner (Application/Infrastructure Owner):

  • Responsibilities:
    • Manage and optimize resources, including handling configuration changes and troubleshooting issues.
    • Ensure that resources comply with governance, security, and compliance standards.
    • Record ownership information and ensure that it remains up-to-date.

Operations Manager:

  • Responsibilities:
    • Maintain the centralized register of resources and their assigned owners.
    • Periodically review and update ownership to reflect changes in workload structure or business requirements.

Compliance Officer:

  • Responsibilities:
    • Collaborate with resource owners to ensure that governance and compliance requirements are enforced across all resources.
    • Review compliance documentation and monitor adherence to regulatory standards.

Artefacts:

Centralized Resource Ownership Register: A document or tool that maintains a list of all resources, including their assigned owners, business value, and relevant metadata.

Ownership Metadata and Tags: Tags or metadata attached to resources that identify the owner, department, or team responsible for managing the resource.

Ownership Review Records: Records of periodic reviews of ownership to ensure that resource assignments are aligned with workload requirements and business needs.

Relevant AWS Services:

Resource Tracking and Management Tools:

  • AWS Resource Groups: Organizes resources based on tags or other metadata, making it easier to manage and monitor resources with common ownership.
  • AWS Tag Editor: Helps apply and manage tags across resources, allowing you to add ownership information and categorize resources based on their value or purpose.

Monitoring and Incident Management Tools:

  • AWS Systems Manager: Provides centralized operational data and enables resource owners to manage and troubleshoot resources.
  • AWS CloudWatch: Monitors resource performance, allowing owners to track resource health and respond to incidents promptly.

Compliance and Governance Tools:

  • AWS Config: Tracks configuration changes and helps ensure compliance with organizational policies, providing visibility into the configurations of owned resources.
  • AWS Identity and Access Management (IAM): Manages permissions and access to resources, enabling resource owners to enforce security policies and ensure appropriate access.
Table of Contents