Management and Governance Services Flashcards
What is CloudTrail?
An Audit trail for your account activity
It inserts into into an S3 bucket or CloudWatch logs
Meets many compliance reqt’s for auditing
Best practice to enable it
Can consolidate to the Org level across all accounts
What are the use cases for CloudTrail?`
Audit compliance
Forensic analysis (data breach)
Operational analysis - who caused the outage
Troubleshooting - when did a bad config thing happen
What is AWS Config?
Tracks configuration of infrastructure.
Continuously evaluates infrastructure against a predefined set of rules so you can evaluate.
Keeps a history
Includes conformance packs for compliance standards so you can be sure your stuff complies
Can go across organizations
Gives insight on how to fix issues
What is AWS Systems Manager?
Provides operational data and automation across infrastructure
Unified interface
What services allow you to manage your infrastructure?
Amazon CloudWatch
AWS Config
AWS Systems Manager
What is AWS CloudWatch?
Monitoring and management service
Collects logs metrics, events
Most servic3s integrate with it by default
Enables alarms based on metrics
Makes visuals - charts, etc -> create dashboards
What can AWS Systems Manager do?
Automate tasks for common maintenance actions
Secure way to access servers using only your AWS credentials
Store commonly used params securely for operational use (i.e., store pwds)
What is AWS CloudFormation?
Allows you to provision infrastructure based on templates
No add’l charge
Templates can be YAML or JSON
This is called Infrastructure as Code
Manages dependencies between resources
Provides drift detection to find changes in your infrastructure
What is AWS OpsWorks?
A configuration management service
Chef and Puppet
Your configuration is defined as code for servers
Can be hybrid
What are the 3 services within OpsWorks?
OpsWorks for Chef Automate
OpsWorks for Puppet Enterprise
OpsWorks Stacks (define an app in layers)
What is AWS Organization?
Allows you to manage multiple accts under a single master acct.
Get one bill
Centralize logging and security across accts
What is AWS Control Tower?
Service to create a multi-acct environment that follows best practices
Centralizes usernames across accts
Create new accts based on templates
Guardrails for accounts
Dashboard for insights with a single view
