Cloudwatch Flashcards
Unified Cloudwatch Agent
for granular, custom logs, or OS level logs and other non AWS Service integration, eg, on-premise
CLoudtrail Retention
90 days stored by default in events History
Cloudtrail Management Operations vs Data Events
API calls on Resources on AWS Account. Interractions with AWS Resources. AKA Control plane operations. eg Create EC2, Create a bucket
Data Events - About resource operations on or in a worker Nodes or in a resource, on events (Streams, lambda calls, etc)
Cloudwatch global Trail
listens to every event on that account, while a regional trail will only capture events within that region.
Log events for Global services into us-east-1(Global HQ). Eg, IAM, Route53, CLoudfront, STS
Meanwhile, regional trail only logs events for regions where the event is generated
Global Trail is enabled by default when a new account is created
Default Setting for CLoudtrail events
By default, events are stored within Cloudtrail.
Unless a Trail is activated, whereby, storage can then be assigned by user/engineer.
ONLY Management events is enabled by default.
Data events have to be enabled
Cloudtrail can store logs in… ?
both cloud watch logs and S3 indefinitel, only S3 charges apply.
Advantage of storing logs in Cloudwatch logs is the ability to apply filters and perform other operations that are otherwise more complex to run with s3
Note:
By default, events are stored within Cloudtrail(as cloud trail History) for 90 days
Unless a Trail is activated, whereby, storage can then be assigned by user/engineer.
CLoudtrail Pricing (Management events vs Data Events)
Management Events - Free
Data Events are billed
CloudTrail Latency
Not real-time
15 minutes
STOP LOGGING
a function on CloudTrail used for stopping/pausing trails. This can be beneficial for minimizing costs associated with generating larger files into s3 that may incur charges
Cloudwatch Metric dimensions
- Cloudwatch Metric dimensions are key:value pairs attached to a metric to specify it’s source. This could be instance ID, AMI iD etc
CLoudwatch detailed monitoring
- CLoudwatch detailed monitoring enables 1 minute granularity metrics report
What is a cloudwatch Metric
- A metric is a collection of related datapoint in a time ordered structure
Cloudwatch use case
- Cloudwatch is a public service, it can be used on AWS, On-prem and even other Cloud Platforms
Cloudwatch default monitors for ec2
C.N.D
- CPU
- Network
- DISK
Cloudwatch Namespace
A Container for storing data/metrics. Like a folder that separates/isolates different metrices.
All AWS Data goes into the NameSpace: AWS/Service. Eg, AWS/Ec2. This namespace is reserved
