Monitoring, Logging, and Notifications Flashcards
What is CloudWatch?
Simplified Defintion:
CloudWatch is a service that allows you to monitor various elements of your AWS account.
AWS Defintion:
CloudWatch monitors your AWS resources and the application you run on AWS in real time. You can use CloudWatch to collect and track metrics, which are variables you can measure for your resources and applications. CloudWatch alarms send notifications or automatically make changes to the resources you are monitoring based on rules that you define.
What is CloudTrail?
Simplified Definition:
CloudTrail allows you to monitor all actions taken by IAM users (i.e. services accessed and actions taken - such as logging who deleted an S3 object).
AWS Definition:
AWS CloudTrail is a service that enables goverannce, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies securitiy analysis, resource change tracking, and troubleshooting.
How are CloudTrail logs saved?
Logs are saved in an S3 bucket in a gzip archive.
