Monitoring, Logging, and Auditing Flashcards
Cloudwatch is the main tool for anything related to an alarm _____ ___ due to a _____being triggered
Cloudwatch is the main tool for anything related to an alarm going off due to a metric being triggered
The two metric intervals that Cloudwatch offers:
____ Metric: 5 mins: _____
____ Metric: 1 mins: ___ ____
The two metric intervals that Cloudwatch offers:
- *Standard** metric: 5 mins: Free
- *Detailed** metric: 1 min: Not Free
If your metric comes in every 5 mins but your alarm is set to look for a data point every 1 min you’ll be ____ in an insufficient data loop and ____ get the alarm
If your metric comes in every 5 mins but your alarm is set to look for a data point every 1 min you’ll be stuck in an insufficient data loop and never get the alarm
If you need a real-time solution which is better between CloudWatch Logs and Kinesis? And why?
Kinesis is ____ _____
CloudWatch Logs is _____ real-time
Kinesis is real-time
CloudWatch Logs is near real-time
CloudWatch is used for performance monitoring, ______, ___ collection and automated actions.
CloudWatch is used for performance monitoring, alarms, log collection and automated actions.
AWS CloudWatch collects performance metrics from AWS and _______ systems.
AWS CloudWatch collects performance metrics from AWS and On-premises systems
CloudWatch can help improve _________ and _______ optimization
CloudWatch can help improve performance and resource optimization
CloudWatch Alarms monitor metrics which _____ actions.
CloudWatch Alarms monitor metrics which initiate actions
CloudWatch Logs is a centralized collection of ______ and __________ logs
CloudWatch Logs is a centralized collection of system and application logs
CloudWatch Events is a stream of ______ ______ describing changes to AWS resources and can _____ actions
CloudWatch Events is a stream of system events describing changes to AWS resources and can trigger actions
The two types of CloudWatch alarms:
____ alarm
__________ alarm.
The two types of CloudWatch alarms:
Metric alarm
Composite alarm.
The Unified CloudWatch Agent enables you to collect _____ system-level metrics from EC2 instances across _______ _______.
The Unified CloudWatch Agent enables you to collect internal system-level metrics from EC2 instances across operating systems
In order for The Unified CloudWatch Agent to work, it must be _______ on the server.
In order for The Unified CloudWatch Agent to work, it must be installed on the server.
ClourdTrail logs ___ activity for ________
ClourdTrail logs API activity for auditing.
By default management events in ClourdTrail are logged and retained for ____ days.
By default management events in ClourdTrail are logged and retained for 90 days.
___ AWS is the service logs CloudTrail Logs for indefinite retention
S3 AWS is the service logs CloudTrail Logs for indefinite retention
CloudWatch Events can be triggered based on API calls in _________
CloudWatch Events can be triggered based on API calls in CloudTrail
Management events provide information about _________ ________ that are performed on resources in your account
Management events provide information about management operations that are performed on resources in your account
Data events provide information about the _________ ________ that are performed on or in a resource
Data events provide information about the resource operations that are performed on or in a resource
Insight events ______ and _____ to unusual activity associated with write API calls
Insight events identify and respond to unusual activity associated with write API calls
Insight events continuously analyze __________ management events in order to identify and respond to unusual activity
Insight events continuously analyze CloudTrail management events in order to identify and respond to unusual activity
Cloudwatch Logs integrate with your __-_________ data and AWS services like EC2, RDS, _______, and __________
Cloudwatch Logs integrate with your on-premises data and AWS services like EC2, RDS, Lambda, and CloudTrail
____ Alarm: performs one or more actions based on a single ______
Metric Alarm- performs one or more actions based on a single metric
The three Metric alarm states include:
____ - Metric is within a threshold
______ - Metric is outside a threshold
___________DATA
OK - Metric is within a threshold
ALARM - Metric is outside a threshold
INSUFFICIEN_DATA
__________ Alarm: uses a rule expression and takes into account _______ alarms
Composite Alarm- uses a rule expression and takes into account multiple alarms
A Kinesis data stream is known as a set of ______. Each _____ has a sequence of data ______ within it.
A Kinesis data stream is known as a set of shards. Each shard has a sequence of data records within it.
Amazon Kinesis Data Streams
A ________ key is used to group data by shard within a stream.
Amazon Kinesis Data Streams
A partition key is used to group data by shard within a stream.
Kinesis Data Streams uses the ________ ___ associated with each data record to determine which _____ the data record belongs to.
Kinesis Data Streams uses the partition key associated with each data record to determine which shard the data record belongs to.
