AWS Auditing, Monitoring and Logging Services

Question 1

What is CloudWatch?

Answer 1

CloudWatch is a collection of services that help you monitor and observe your cloud resources.

• Collects metrics, logs, and events
• Detect anomalies in your environment
• Set Alarms
• Visualize logs

Question 2

What is CloudWatch real world usecase?

Answer 2

• CloudWatch Alarms can notify you if an EC2 instance goes into the stopped state or usage goes above a certain utilization.
• Create a CloudWatch event rule to notify you when root user API calls are detected in your account indicating root user activity.

Question 3

What is CloudTrail?

Answer 3

CloudTrail tracks user activity and API calls within your account.

• Log and retain account activity
• Track activity through the console, SDKs, and CLI
• Identify which user made changes
• Detect unusual activity in your account

Question 4

What is CloudTrail real world usecase?

Answer 4

You can troubleshoot events over the past 90 days using the CloudTrail event history log to find the specific time an event occurred on a per-Region basis. You can create a custom trail to extend past 90 days.