Auditing, Monitoring, and Logging Services

Question 1

CloudWatch

Answer 1

CloudWatch is a collection of services that help you
monitor and observe your cloud resources.

Collects metrics, logs, and events.
Detect anomalies in your environment.
Set alarms.
Visualize logs.

Don’t forget you can use CloudWatch to monitor your EC2 instances and notify you when certain events occur

Question 2

CloudWatch Services:

Answer 2

CloudWatch Alarms -Set high resolution alarms
CloudWatch Logs - Monitor application logs
CloudWatch Metrics - visualize time-series data
CloudWatch Events - trigger an event based on a condition

Question 3

CloudTrail

Answer 3

CloudTrail tracks user activity and API calls within your account.

Log and retain account activity.
Track activity through the console, SDKs, and CLI.
Identify which user made changes.
Detect unusual activity in your account.

CloudTrail in the Real World: Track the time a particular event occurred in your account. You can troubleshoot events over the past 90 days using the CloudTrail event history log to find the specific time an event occurred on a per-Region basis. You can create a custom trail to extend past 90 days.

Don’t forget the things you can track with CloudTrail: username, event time and name, IP address, access key, Region, and error code.

Question 4

What can you track with Cloud trail?

Answer 4

username
event time and name
ip addresses
access key
region
error code