AWS General Knowledge Flashcards
What is ARN?
Amazon Resource Name.
Uniquely identifies resources within any AWS accounts. You can use wildcards to refer to a group of resources.
What are ARN parts explained?
arn:aws:s3:east-us1:jas-gt-1:asd-es-5-pics/es-5-20210598.png
arn: partition:service:region:account-id:resource-id
arn: partition:service:region:account-id:resource-type/resource-id
arn: partition:service:region:account-id:resource-type:resource-id
Is CloudWatch Logs a Private or Public service?
Public
What is CloudWatch Logs used for?
Store, Monitor and Access logging data
How can CloudWatch Logs integrate with other AWS services?
AWS Service Integrations or Unified CloudWatch Agent
In CloudWatch Logs, What are Log Groups?
A group of Log Streams.
Where do you apply Retention and Persmissions for CloudWatch logs?
At the Log Group level
What is CloudTrail used for?
CloudTrail logs API actions which affects AWS accounts
What are the different types of events in CloudTrail?
Management events provide information about management operations that are performed on resources in your AWS account. These are also known as control plane operations.
Data events provide information about the resource operations performed on or in a resource. These are also known as data plane operations. Data events are often high-volume activities.
CloudTrail Insights events capture unusual activity in your AWS account. If you have Insights events enabled, and CloudTrail detects unusual activity, Insights events are logged to a different folder or prefix in the destination S3 bucket for your trail
What is a CloudTrail Trail?
A trail is a configuration that enables delivery of CloudTrail events to an Amazon S3 bucket, CloudWatch Logs, and CloudWatch Events. You can use a trail to filter the CloudTrail events you want delivered, encrypt your CloudTrail event log files with an AWS KMS key, and set up Amazon SNS notifications for log file delivery.
Are CloudTrail Trails regional or global?
A trail can be applied to all Regions or a single Region. As a best practice, create a trail that applies to all Regions in the AWS partition in which you are working. This is the default setting when you create a trail in the CloudTrail console.
By default, What is the CloudTrail Event History time limit?
90 days; if you wish to store beyond that you need to create a Trail to store events in S3.
In CloudTrail; What is an Organization Trail?
An organization trail is a configuration that enables delivery of CloudTrail events in the management account and all member accounts in an AWS Organizations organization to the same Amazon S3 bucket, CloudWatch Logs, and CloudWatch Events. Creating an organization trail helps you define a uniform event logging strategy for your organization.
What types of events are enabled by default in CloudTrail?
Management events only.
Name some services that log events as Global Services in CloudTrail
IAM, STS, CloudFront log events as global events on us-east-1
