04 - AWS Inspector vs AWS Trusted Advisor vs CloudTrail

Question 1

CloudWatch

Answer 1

CloudWatch

• Monitors performance (Built-In or Custom Metrics)Host Level Metrics
  
  • CPU
  • Network
  • Disk
  • Network
• Custom Metrics
  
  • RAM utilization

Question 2

CloudTrail

Answer 2

CloudTrail

• Monitors API Calls in the AWS Platform
• Records AWS Management Console Actions and API Calls
• You can identify
  
  • Which users and accounts called AWS
  • The source IP address from which the calls were made
  • When the calls occurred

Question 3

Config

Answer 3

Config

• Records the state of your AWS environment and can notify you of changes
• How resources are related to one another
• How resources were configured in the past
• Can see how configurations and relationships changed over time

Question 4

Inspector

Answer 4

Inspector

• Agent installed on EC2 instances used to run host level assessments for security vulnerabilites

Question 5

Trusted Advisor

Answer 5

Trusted Advisor

• Examines entire AWS Account (looks at more than security, also cost optimization / performance / fault tolerance / service limits)
• Two Levels: Basic (only security & service limits) & Full Trusted Advisor (all)