Section 20: AWS Monitoring & Audit, CloudWatch, X-Ray and CloudTrail: CloudWatch Flashcards

1
Q

What does monitoring help us monitor/mitigate/do?

A
  • Monitoring helps us monitor app latency, app outages, trends (scaling patterns), performance and cost.
  • Monitoring helps mitigate the chances of users contacting IT to complain about some bad behavior and generally help us precent issues before they happen.
  • Monitoring can help us troubleshoot remediate, learn about and improve our apps .
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What can monitoring help with in terms of deployment?

A

Monitoring can help us determine how to deploy apps safely, automatically, using best aws components and using infrastucture as code.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is AWS CloudWatch used to do/collect (four main things)

A
  • Metrics (collect and track)
  • Logs (collect, monitor, analyze, store log files)
  • events (send notifications when certain events happen in your aws)
  • alarms (react in real time to metrics/events)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You want metrics, logs, events notifications, and/or alarms. What AWS service could you use?

A

CloudWatch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What does AWS X-Ray help do?

A
  • Troubleshoot application performance and errors
  • distribute tracing of microservices
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You want to use an aws service to help with troubleshooting application performance and errors and with distributed tracing of microservices. What aws service do you use?

A

AWS X-Ray.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What does AWS CloudTrail help with?

A
  • Internal monitoring of API calls being made
  • audit changes to aws resources made by your users
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

You want an aws service to help with internal monitoring of api calls being made, or with auditing changes made to aws resources by your users. What AWS service would help with this?

A

AWS CloudTrail.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Is CloudWatch capable of providing metrics for every AWS service?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are two examples of CloudWatch metrics?

A

CPUUtilization, NetworkIn

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What grouping do CloudWatch metrics belong to?

A

Namespaces.

“A namespace is a container for CloudWatch metrics. Metrics in different namespaces are isolated from each other, so that metrics from different applications are not mistakenly aggregated into the same statistics.

There is no default namespace. You must specify a namespace for each data point you publish to CloudWatch. You can specify a namespace name when you create a metric. These names must contain valid ASCII characters, and be 255 or fewer characters. Possible characters are: alphanumeric characters (0-9A-Za-z), period (.), hyphen (-), underscore (_), forward slash (/), hash (#), and colon (:). A namespace must contain at least one non-whitespace character.

The AWS namespaces typically use the following naming convention: AWS/service. For example, Amazon EC2 uses the AWS/EC2 namespace. For the list of AWS namespaces, see AWS services that publish CloudWatch metrics.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are metric attributes called, what are a couple examples of those, and how many of those can you have per metric?

A

Dimensions are metric attributes. Two dimension examples are instance.id (in the aws docs called InstanceId) and environment.name (probably EnvironmentName in aws docs, though it’s trickier to find). You can have up to 30 dimensions per metric.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q
  1. Do metrics have timestamps?
  2. Can you create CloudWatch dashboards of metrics?
A

yes and yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

CloudWatch and ec2 monitoring:
* ec2 instances send metrics to CloudWatch every 5 minutes. What can you use to get metrics sent to CloudWatch more often, how often would you get them, and is there a cost?

A
  • ec2 detailed monitoring
  • every 1 minute
  • there is an extra cost sometimes (AWS free tier allows us to have 10 detialed monitoring metrics)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Would ec2 detailed monitoring (the thing that helps your ec2 instance send metric data to CloudWatch every 1 minute) help your ASG be able to scale faster?

A

Yes. This is probably because without detailed monitoring you’re metric data is getting sent to CloudWatch every 5 minutes, so you’ll probably know about issues requiring ASG action up four minutes sooner when you use detailed monitoring.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Lets say you wanted ec2 memory usage to be sent to cloudwatch with the rest of the ec2 metrics, but it’s not showing up. What’s the problem/solution?

A

Ec2 memory usage is not pushed to CloudWatch by default. It must be pushed from inside the instance as a custom metric.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q
  • What do you use when you want to define and send your own custom metrics to CloudWatch (name of the subservice and the api call)?
  • What are some examples of what kinds of custom metrics people are interested in?
A
  • CloudWatch custom metrics
  • API call PutMetricData
  • memory (RAM usage), disk space, number of logged in users
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Can you still segment metrics into dimentions when using CloudWatch Custom Metrics?

A

yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q
  • What are the two categories (and their respective values) for metric resolution (idk why they didn’t call it metric retreival frequency)
  • What is the API parameter used to set metric resolution (hint, it’s not MetricResolution)
A
  • Standard (1 minute)
  • High Resolution (1/5/10/30 seconds) - Higher cost
  • StorageResolution API parameter. The two possible values are the standard and high ones mentioned above (which kind of makes me suspect StorageResolution takes a String, ‘Standard’, or a dictionary, like {“High Resolution”: 5}). Haven’t double checked that, just guessing.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Better, though completely only anna-fficial, name for CloudWatch Custom Metric metric resolution (just the metric resolution part)

A

Metric Retreival Frequency. Or Metric Push Frequency. Not sure which direction things are going in. Perhaps Metric Receiving Frequency? Metric Receival Frequency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

IMPORTANT

What range of time can CloudWatch Custom Metrics accept data points for?

A

2 weeks in the past to two hours in the future (make sure to configure your ec2 instance time correctly).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Okay, CloudWatch Logs.
* What are log groups?
* What are log streams?
* When do logs expire (what are the log expiration policies)?

A
  • Log groups are arbitrary names, usually representing an applicatoin
  • log streams are instances within an application / log files/ containers.
  • can define log expiration policies (never expire, 1 day to 10 years)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What serices can CloudWatch logs send logs to?

A
  • S3 (exports)
  • Kinesis Data Streams
  • Kinesis Data Firehose
  • AWS Lambda
  • OpenSearch (not even sure this is an aws thing)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

When using CloudWatch Logs, are logs encrypted by default? Can you setup KMS based encryption with your own keys.

A
  • Logs are encrypted by default
  • you can setup KMS based encryption with your own keys.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What are some popular CloudWatch Logs sources?

A
  • SDK, CloudWatch Logs Agent, CloudWatch Unified Agent
  • Elastic Beanstalk (collection of logs from app)
  • ECS (collection from containers)
  • aws lambda (collection from function logs)
  • vpc flow logs (vpc specific logs)
  • api gateway
  • cloudTrail based on filter
  • Route 53: Log DNS queries
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

How do you generate CloudWatch Logs insights?

A
  • Search and analyze log data stored in CloudWatch logs
  • for example: find a specific IP inside a log, count occurrences of “Error” in our logs
    *
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Does CloudWatch Logs Insights provide a purpose build query language? Provide any other information

A

Yes.
* It automatically discovers fields from aws services and json log events
* fetch desired event fields, filter based on conditions, calculate aggregate stats, sort events, limit number of events
* can save queries and add them to cloudwatch Dashboards
* –

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q
  • Can you query multiple logs groups in different aws accounts using CloudWatch Logs Insights?
  • Is CloudWatch Logs Insights a query engine or a real time engine?
A
  • Yes
  • a query engine
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Whats an example of the CloudWatch Logs Insights query used to:
* find the 25 most recently added log events
* return the number of exceptions logged every 5 minutes
* get a list of log events that are not exceptions

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q
  • If you want to use CloudWatch Logs to get logs to S3, how long can it take log data to become available for S3 export?
  • What is the API call used to export CloudWatch logs by first sending them to S3?
  • Is the data in this export near real-time or real-time? If it’s not, what would you use instead?
A
  • up to 12 hours
  • API call is CreateExportTask
  • not near real-time or real-time. Use Logs Subscriptions instead.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What can CloudWatch Logs Subscriptions help with?

A

Getting real time log events from CloudWatch Logs for processing and analysis.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

To what aws services does CloudWatch Logs Subscriptions send data?

A

CloudWatch Logs Subscriptions can send data to Kinesis Data Streams, Kinesis Data Firehose, or Lambda. From here, the data is sent to other aws service instances as needed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What is a CloudWatch Logs Subscriptions subscription filter?

A

CloudWatch Logs Subscriptions filter which logs are events delivered to your destination

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

You have some real time CloudWatch Logs that you want to use to search sites (or for real time app monitoring or analytics). What aws services might you use?

A

CloudWatch Logs -> CloudWatch Logs Subscription Filter -> AWS Lambda -> AWS OpenSearch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

You have some near real time CloudWatch Logs that you want to you want to use to search sites (or for real time app monitoring or analytics), or maybe you just want to store the data. What aws services might you use?

A
  1. If you want to use the data to search sites, or for real time app monitoring or analytics, then do CloudWatch Logs -> Subscription Filter (i suppose to filter out just the messages you’re interested in?) -> Kinesis Data Firehose -> OpenSearch Service.
  2. If you want to store the near real time data -> CloudWatch Logs -> Subscription Filter -> Kinesis Data Firehose -> S3
36
Q

You have CloudWatch Logs that you want to get into KDF (Kinesis Data Firehose), KDA (Kinesis Data Analytics), EC2, Lambda, and maybe some other stuff. How do you get from start to finish

A

CloudWatch Logs -> Subscription Filter -> Kinesis Data Streams -> KDF, KDA, EC2, or Lambda

37
Q

Lets say you have CloudWatch Logs in Account A in Region 1, in Account B in Region 2, and in Account B in Region 3. Some of these logs get near real time data that you want to store somewhere (maybe for export, maybe for an audit trail, idk). It also looks like maybe you want to store that data in a single S3 bucket (or perhaps like a single collection of buckets, but the point is you want at least some of all the CloudWatch Logs data in at least one, but maybe a shared collection of S3 buckets). The S3 bucket(s) isn’t in the same account as all the CloudWatch Logs instances (say it’s just in Account A).

  1. How do you pull this off?
  2. If you could put some names together to describe this process, what would that name be? (if you don’t get this second one correct, that’s okay. I don’t know if there’s a specific real term for it, but, you know.)
A
  1. See picture
  2. I think it’s CloudWatch Logs Subscriptions Aggregation with Cross Account Subscription.

The reverse question would probably be come up with some words to describe this.

38
Q

What is Cross-Account Subscription (as it relates to CloudWatch Logs Subscriptions)

A

send logs events to resources in a different aws account (like Kinesis Data Streams or Kinesis Data Firehose)

39
Q

You want to use Cross Account Subscription for some CloudWatch Logs so you can eventually get CloudWatch Logs logs from various accounts into a single Kinesis Data Stream. What two security things do you need?

A

An IAM Role for the cross account subscription stuff, and a destination access policy.

40
Q

You want to use Cross Account Subscription for some CloudWatch Logs so you can eventually get CloudWatch Logs logs from various accounts into a single Kinesis Data Stream. You need an IAM Role for the Cross Account stuff, and a Destination access policy. Fill in the blanks in the IAM Role/Access Policy.

A
  1. IAM Role Action: “kinesis:PutRecord”
  2. IAM Role Resource: “arn:aws:kinesis:us-east-1:99999999999:stream/RecipientStream”
  3. Destination Access Policy Action: “logs:PutSubscriptionFilter”, (I expect you to have noticed the missing comma xoxo)
  4. Destination Access Policy Resource: “arn:aws:logs:us-east-1:99999999999:destination:testDestination”
41
Q

What is CloudWatch Logs Live Tail? (I think it was released summer ‘23, so probably won’t be on the exam, but I’m just guessing. Just in case, at least be able to roughly answer this question.)

A

CloudWatch Logs Live Tail helps you quickly troubleshoot incidents by viewing a streaming list of new log events as they are ingested. You can view, filter, and highlight ingested logs in near real time, helping you to detect and resolve issues quickly. You can filter the logs based on terms you specify, and also highlight logs that contain specified terms to help you quickly find what you are looking for.

Live Tail sessions incur costs by session usage time, per minute. For more information about pricing, see the Logs tab at Amazon CloudWatch Pricing.

42
Q

How do you setup CloudWatch Logs for EC2?

A

They’re not enabled by default. You need to run a CloudWatch agent on EC2 to push the log files you want. Make sure the IAM permissions are correct. (CloudWatch log agent can be setup on-premises too)

43
Q

CloudWatch Logs Unifying Agent
* what was the old version called (you can get this one wrong)
* What is it’s purpose?

A
  • It’s for virtual servers: ec2 instances, on premise servers (even ones not managed by aws), etc. In any event, it looks like it’s only for Linux and Windows.
  • CloudWatch Logs Unifying Agent is used to collect system level metrics / logs (ex, metrics about how your ec2 instance is doing) such as RAM, processes, etc. It sends the data to CloudWatch Logs (pretty sure it can only directly send to CloudWatch Logs, though of course once there you can set things up so the data can go elsewhere).
  • It has (or can have?) a centralized configuration using SSM Parameter Store.
  • Retrieve custom metrics from your applications or services using the StatsD and collectd protocols. StatsD is supported on both Linux servers and servers running Windows Server. collectd is supported only on Linux servers.
  • old version is called CloudWatch Logs Agent. Can only be used to send metrics to CloudWatch Logs.

The CloudWatch agent does not support collecting logs from FIFO pipes.

44
Q

What kinds of metrics does CloudWatch Unified Agent collect? (as a hint, remember unified agents collect metrics about virtual servers)

A
  • CPU (active, guest, idel, system, user, steal)
  • disk metrics (free, used, total), disk IO (writes, reads, bytes, iops)
  • RAM (free, inactive, used, total, cached)
  • netstat (number of TCP and UDP connections, net packets, bytes)
  • processes (total, dead, bloqued, idle, running, sleep)
  • swap space (free, used, used %)
  • reminder: out of the box metrics for ec2 - disk, cpu, network (high level)
45
Q
  1. Can you filter cloudwatch logs based on certain metrics?
  2. With what? (What’s it called?)
A

yep yep. you use CloudWatch Logs Metric Filter

46
Q

Can CloudWatch Logs Metric Filters be used to trigger alarms?

A

Yep yep

47
Q

What are two examples of what CloudWatch Logs Filter can be used for?

A
  1. to find a specific IP inside of a log
  2. to count occurances of “ERROR” in your logs
  3. to trigger alarms (I know, i said two, but another question addresses this third one anyway)
48
Q
  1. Can CloudWatch Logs Metric Filters filter data retroactively?
  2. You want to use a CloudWatch Logs Metric Filter with an elasticbeanstalk environment (apparently this one has both apps and envs). you’ve already created the filter, but for some reason it doesn’t seem to be collecting the logs. What gives?
A
  1. Nope. The filter can only publish metric data points for events that happen after the filter was created.
  2. you have to go to your elastic beanstalk environment and restart the app server (seen in a hands on).
49
Q

How many dimensions are you able to specify per metric filter? (note, I think you don’t have to specify any)

A

3.

50
Q

What’s a flow for getting from a CloudWatch Logs Agent on an EC2 instance to sending an email?

A

CloudWatch Logs Agent for (maybe on?) EC2 instance -> (stream) -> CloudWatch Logs -> CloudWatch Logs Metric Filter -> CloudWatch Alarm -> Sending an email with AWS Simple Notification Service

51
Q

Are CloudWatch Logs Metric Filters frequently used to trigger CloudWatch Alarms?

A

yes

52
Q

CloudWatch Alarms are used to…

A

trigger notifications for any metrics

53
Q

What are some popular statistics (aws’s term) on which CloudWatch alarms can be triggered?

A

sampling, %, max, min, average, etc

54
Q

What are the three CloudWatch Alarm states?

A
  1. OK
  2. INSUFFIENT_DATA
  3. ALARM
55
Q

T/F

A CloudWatch Alarm period is the length of time in seconds to evaluate the metric

A

T

56
Q

CloudWatch Alarms with high resolution custom metrics can have period lengths of (three values):

A
  • 10 sec
  • 30 sec
  • multiples of 60 secs
57
Q

CloudWatch Alarms can be used to do what to an ec2 instance?

A

stop, terminate, reboot, or recover an ec2 instance

58
Q

CloudWatch Alarms can be used to do what to an Auto Scaling Group?

A

Trigger an auto scaling action

59
Q

T/F

CloudWatch Alarms can be used to send notifications to SNS

A

T

60
Q

What three aws services/usages are CloudWatch Alarms probably super popular for?

A
  1. stopping, terminating, rebooting or recovering an ec2 instance
  2. triggering an auto scaling action
  3. sending notifications to SNS (from which you can do basically whatever you want)
61
Q

How many metrics can a single CloudWatch Alarm consider?

A

one

62
Q

What do I use if I want to create a cloudalarm that considers multiple metrics?

A

CloudWatch Alarms - Composite Alarms

63
Q

What do CloudWatch Alarms - Composite Alarms do?

A

Monitor the state of multiple other CloudWatch Alarms.

Note (that you don’t have to mention) they’re helpful for reducing alarm noise by creating complex composite alarms.

64
Q

What logical conditions do CloudWatch Alarms - Composite Alarms allow?

A

and and or
lol
that’s “and” and “or”

65
Q

Ex of CloudWatch Alarms - Composite Alarm

A
66
Q

You have an ec2 instance and you want to monitor the instance status (check the ec2 vm) and the system status (check the underlying hardware). What free CloudWatch Metrics can you use to do this monitoring?

A

New Metrics
In order to make it even easier for you to monitor and respond to the status checks, we are now making them available as Amazon CloudWatch metrics at no charge. There are three metrics for each instance, each updated at 5 minute intervals:

StatusCheckFailed_Instance is “0” if the instance status check is passing and “1” otherwise.
StatusCheckFailed_System is “0” if the system status check is passing and “1” otherwise.
StatusCheckFailed is “0” if neither of the above values is “1”, or “1” otherwise.

67
Q

You have an ec2 instance and you want to monitor the instance status (check the ec2 vm) and the system status (check the underlying hardware). How could you monitor these things, and how could you get alerts about related problems?

A

You could use a CloudWatch Alarm(s) based on the free metrics StatusCheckFailed_System, StatusCheckFailed_Instance, and StatusCheckFailed (which is just a combo of StatusCheckFailed_System and StatusCheckFailed_Instance). Then if you get a “1” for any of those (that’s the bad value) you can use the alarm to trigger an ec2 instance recovery and send an alert to an SNS topic.

68
Q

You have an ec2 instance and you want to monitor the instance status (check the ec2 vm) and the system status (check the underlying hardware). When you use CloudWatch Alarm to do monitoring and ec2 instance recovery, what properties of the ec2 instance remain the same in the recovered version?

A

A recovered instance is identical to the original instance, including the instance ID, private/public IP addresses, Elastic IP addresses, placement group, and all instance metadata. If the impaired instance has a public IPv4 address, the instance retains the public IPv4 address after recovery. If the impaired instance is in a placement group, the recovered instance runs in the placement group. During instance recovery, the instance is migrated as part of an instance reboot, and any data that is in-memory is lost.

Examples of problems that require instance recovery:

Loss of network connectivity

Loss of system power

Software issues on the physical host

Hardware issues on the physical host that impact network reachability

69
Q

I know it’s been mentioned before, but can CloudWatch Alarms be baseed on CloudWatch Logs Metrics Filters?

A

Yes

70
Q

What is the cli statement for testing alarms and notifications? (note that in the video he uses the term “api” but then looks at cli docs, so if you see either mentioned on the exam, assume cli is meant.)

A
  1. $ aws cloudwatch set-alarm-state –alarm-name “myalarm” –state-value ALARM –state-reason “testing testing 123”
71
Q

How often can you run CloudWatch Synthetics Canary canaries (they’re not called scripts, btw they’re called canaries)?

A

once or on a regular schedule (up to 24 hours a day, once per minute).

72
Q

Can CloudWatch Synthetics Canary used to trigger CloudWatch alarms? Does that seem like a popular use?

A

Yep and yep.

73
Q

In what languages are CloudSynthetics Canary canaries (honestly sometimes aws calls them canaries and sometimes it seems as though they’re calling them scripts. maybe multiple scripts can get used to create a canary) written?

A

Node.js or Python

74
Q

You need programmatic access to a headless Google Chrome browser to go through your site the way and end user might and probably test/anticipate problems that way. What aws service might you want to use?

A

CloudWatch Synthetics Canary.

75
Q

What is CloudWatch Synthetics Canary used for? (The last bullet is different, but the first three are saying similar things in different ways. So just mention the general idea of those).

A
  • To continuously monitor your services (APIs (check the availability and latency of your endpoints ), URLS, websites (can store load time data and screenshots of the UI)).
  • To reproduce what your customers do programmatically to find issues before customers are impacted.
  • To check the availability and latency of your endpoints and can store load time data and screenshots of the UI (I think in a way that’s similar to the way above).
  • To trigger CloudWatch alarms.

You can use Amazon CloudWatch Synthetics to continually monitor your services. You can create and manage canaries, which are modular, lightweight scripts that monitor your endpoints and APIs from the outside-in. You can set up your canaries to run 24 hours a day, once per minute. The canaries help you check the availability and latency of your web services and troubleshoot anomalies by investigating load time data, screenshots of the UI, logs, and metrics. The canaries seamlessly integrate with CloudWatch ServiceLens to help you trace the causes of impacted nodes in your applications. For more information, see Using ServiceLens to Monitor the Health of Your Applications in the Amazon CloudWatch User Guide.

76
Q

What does CloudWatch Synthetics Canary remind you of? (not that it’s exactly the same, but to what thing that you’ve tried to do before is it similar?)

A

Since it also has programmatic access to a headless google chrome browser and you can write the scripts in node.js or python, it kind of reminds me of web scraping, only you’d apparently only use it on your own sites to test stuff out. Though they specifically do mention that there are some security concerns to watch out for.

77
Q

Talk me through this:

A

Users try to get through to your app and get to Route 53 first. Then their requests gets to an ec2 instance in us-east-1. Then the CloudWatch Synthetics Canary monitor watching that ec2 instance notices there’s a problem with that instance. SO it triggers a CloudWatch Alarm. The CloudWatch Alarm invokes a Lambda function. The function updates Route 53 with the new DNS record. I presume (didn’t actually listen to the audio) that then the traffic gets sent to the other ec2 instance, the one in us-west-2.

78
Q

What are CloudWatch Synthetics Canary Blueprints used for?

A

I think they’re used to speed up the process of making a canary by allowing a person to use like a you know blueprint. But um look for a better definition later.

79
Q

When you’re making a CloudWatch Synthetics Canary canary, do you have to use a blueprint, or is it optional?

A

When you use the CloudWatch console to create a canary, you can use a blueprint provided by CloudWatch to create your canary or you can write your own script.. […] You can also create a canary using AWS CloudFormation if you are using your own script for the canary.
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_Create.html

80
Q

Okay, so what are 6 CloudWatch Synthetics Canary Blueprints? (Just names, we’ll talk details later).

A
  • Heartbeat Monitor
  • API Canary
  • Broken Link Checker
  • Visual Monitoring
  • Canary Recorder
  • GUI Workflow Builder
81
Q

Okay, so what is a CloudWatch Synthetics Canary Blueprints - Heartbeat Monitor

A

load URL, store screenshot and an HTTP archive file

82
Q

Okay, so what is a CloudWatch Synthetics Canary Blueprints - API Canary

A

test basic read and write functions of REST APIs

83
Q

Okay, so what is a CloudWatch Synthetics Canary Blueprints - Broken Link Checker

A

Check all inks inside the URL that you’re testing

84
Q

Okay, so what is a CloudWatch Synthetics Canary Blueprints - Visual Monitoring

A

compare a screenshot taken during a canary run with a baseline screenshot

85
Q

Okay, so what is a CloudWatch Synthetics Canary Blueprints - Canary Recorder

A

used with CloudWatch Synthetics Recorder (record your actions on a website and automatically generates a script for that)

86
Q

Okay, so what is a CloudWatch Synthetics Canary Blueprints - GUI Workflow Builder

A

Verifies taht actions can be taken on your webpage (e.g., test a webpage with a login form)