From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Logging, Monitoring, and Auditing Exam Cram

Logging, Monitoring, and Auditing Exam Cram - Amazon Web Services (AWS) Tutorial

From the course: AWS Certified Security - Specialty (SCS-C03) Cert Prep

Start my 1-month free trial Buy for my team

Logging, Monitoring, and Auditing Exam Cram

“

Welcome to the Logging, Monitoring, and Auditing exam cram. Amazon CloudWatch is used for performance monitoring, logging, alarms, and events. The unified CloudWatch agent can be installed on EC2 instances to collect application log files and stream them to CloudWatch logs. The unified CloudWatch agent sends system-level metrics for EC2 and on-premises servers. System-level metrics include memory and disk usage. An EC2 instance in a private subnet running the unified CloudWatch agent can be configured to send logs to CloudWatch logs securely via an interface VPC endpoint. You can also send CloudWatch logs to S3, Kinesis Data Streams, and Kinesis Data Firehose. If Lambda fails to write logs to CloudWatch logs, check the function execution role for permissions. AWS CloudTrail logs API activity for auditing purposes and you must create a trail to store logs indefinitely. Otherwise, it's a 90 days limit. A CloudTrail trail can be configured in the management account of an organization…

Contents