Monitoring

Question 1

CloudWatch EC2

Answer 1

• Standard at 5 min intervals

- Can enabled detailed at 1 min intervals

Question 2

CW EC2 Metrics

Answer 2

• If have instance store metrics can include disk

- To send RAM metrics use CW unified agent

Question 3

CW Custom Metrics Resolution

Answer 3

Standard 1min, but can make 1sec

Question 4

CW Alarms Can Trigger

Answer 4

• EC2 Action
• Auto-scaling Action
• SNS
• Can be intercepted by CW Events

Question 5

CW Dashboards

Answer 5

• Metrics & Alarms

- Metrics of multiple regions

Question 6

CW Events

Answer 6

Can intercept any API call with CloudTrail integration

Question 7

CW Logs - Sources

Answer 7

• SDK
• CW logs agent
• CW unified agent
• Elastic Beanstalk, collects logs from apps
• ECS: collection from containers
• Route53: DNS queries

Question 8

CW Logs

Answer 8

• Log Groups - Application
• Log Stream - instances within application / log files/ containers
• Can define log expiration policies
• Optional KMS
• Multi account and multi region aggregation -> Kinesis Data Streams

Question 9

CW Insights

Answer 9

• Can be used to query logs and add queries to Dashboard

- Has a list of pre-defined useful queries

Question 10

CW S3 Export

Answer 10

• S3 buckets must be encrypted w SSE-S3, NOT SSE-KMS
• Log data can take up to 12 hours to become available for export
• Must call CreateExportTask, so NOT automated

Question 11

CW Logs Subscription Filter Targets

Answer 11

• Lambda -> ES (Real time)
• Lambda -> Custom
• Lambda -> Kinesis Firehose -> Amazon S3/ES (Near real time)
• Kinesis Data Streams

Question 12

Batch Sends

Answer 12

• batch_count: default 10000, min 1
• batch_duration: default & min is 5000ms
• batch_size: default & max 1MB

Question 13

CW Unified Agent

Answer 13

• Additional system-level metrics, RAM, processes etc
• Centralised config using SSM Parameter Store
• Both agents cannot send to Kinesis, only CW logs

Question 14

X-ray

Answer 14

X-ray agent or services need IAM permissions to X-ray