Monitoring

Question 1

What is the granularity for standard, detailed, and fine grained monitoring resolutions in CloudWatch and how are fine grained metrics generated?

Answer 1

Standard: 5 Minutes
Detailed: 1 Minute
Fine grained: 1 Second. Fine grained metrics are custom metrics generated from an instance using the putMetric API

Question 2

When you first create an alarm, what will its status initially be?

Answer 2

Insufficient_Data

Question 3

An alarm on a high resolution metric can be triggered every how many minutes (minimum and maximum)?

Answer 3

An alarm can be triggered on a high resolution metric ever 10 OR 30 seconds.

Question 4

For an autoscaling group what configuration would you use for cloud watch metrics - standard or detailed - and why?

Answer 4

Detailed as the resolution is higher. In a detailed metric group, we get data back every minute. In standard we only get it every 5 minutes which is likely to be to coarse a resolution to be useful.

Question 5

Which resources states can be monitored by trusted adviser (2):

1. R53 Routing Failures
2. Running but Idle EC2 Instances
3. S4 buckets with open permissions
4. EC2 instances with root ssh access

Answer 5

2 and 3

Question 6

Can Cloudwatch monitor an instances disk and memory usage?

Answer 6

No. Not by default. You will need to set up custom metrics

Question 7

In CloudTrail, what is a management event?

Answer 7

When a principal executes or attempts to execute a request against any AWS resource.

Question 8

Are cloudwatch dashboards global or region locked?

Answer 8

Dashboards are Global. You can chart data from multiple regions on the same dash if needed

Question 9

Cloudwatch logs support streaming of logs for most AWS services. Can you stream logs from custom applications?

Answer 9

Yes, you can use the AWS SDK to stream custom logs. As with everything you will need IAM permissions. The unified CW agent can also stream logs to cloudwatch

Question 10

By default, how long does cloud trail collect data for and is this for all events? Is this per region or global?

Answer 10

90 Days of management events - but not data events. Per Region.

Question 11

What is a write only management or data event in CloudTrail?

Answer 11

Write only management event: any attempt to modify an aws resource regardless if it was successful or not.

Data Write Only event is a change to S3 or lambda.