Monitoring on AWS

Question 1

What is cloud watch?

Answer 1

Amazon CloudWatch is a monitoring and observability service provided by Amazon Web Services (AWS).

Question 2

What are key features of Cloud Watch?

Answer 2

1. Metrics Collection and Monitoring
2. Logs Management
3. Alarms
4. Dashboards
5. Events and Automation
6. Insights
7. Service Lens

Question 3

What is Cloud Trail

Answer 3

CloudTrail provides a record of actions taken by users, roles, and AWS services, helping you understand activity in your AWS environment. (Infrastructure Logging)

CloudTrail focuses on the events, or API calls, that drive those changes. It focuses on the user, application, and activity performed on the system

Question 4

VPC FLow Logs

Answer 4

VPC Flow Logs is a feature that you can use to capture information about the IP traffic that goes to and from network interfaces in your VPC. Flow log data can be published to Amazon CloudWatch Logs or Amazon S3.

Question 5

Amazon Guard Duty

Answer 5

Amazon GuardDuty is a near-continuous security monitoring service that analyzes and processes data sources, such as CloudTrail data events for Amazon S3 logs, CloudTrail management event logs, DNS logs, Amazon EBS volume data, Amazon Elastic Kubernetes Service (Amazon EKS) audit logs, and Amazon VPC flow logs.

Amazon GuardDuty is a threat detection service that continuously monitors your AWS accounts and workloads for malicious activity and delivers detailed security findings for visibility and remediation

Question 6

AWS Config

Answer 6

AWS Config provides a detailed view of how AWS resources are configured in your AWS account.

Config is focused on the configuration of your AWS resources and reports with detailed snapshots on how your resources have changed.