Auditing, Monitoring and Logging

Question 1

what do auditing, monitoring and logging systems do?

Answer 1

• they provide insight into how well your systems are performing
• they help you proactively find and resolve errors
• help you troubleshoot the who, what, why and how something resulted

Question 2

CloudWatch

Answer 2

a collection of services that help you monitor and observe your cloud resources and detect anomalies in your environment

Question 3

CloudWatch Alarms

Answer 3

alarms when a metric condition/threshold is reached

Question 4

CloudWatch Logs

Answer 4

used to monitor application logs

Question 5

CloudWatch Metrics

Answer 5

used to visualize time-series data

- the AWS services you use send metrics to CloudWatch and you can access them there

Question 6

CloudWatch Events

Answer 6

trigger an event based on a condition (such as someone logging in)

Question 7

CloudTrail

Answer 7

tracks user activity and API calls within your account

• identify which user made changes
• detect unusual activity in your account

Question 8

3 ways to access CloudTrail

Answer 8

1) AWS console
2) SDKs
3) CLI

Question 9

Use case example for CloudTrail

Answer 9

track the moment a particular event occurred

• defaults within the last 90 days
• can customize to track longer than 90 days

Question 10

What is trackable by CloudTrail?

Answer 10

• user
• time something occurred
• region
• IP
• error code
• access key