AWS monitoring
Trusted advisor
AWS way for continously monitor our a/c for AWS best practices
it is helpful for
reduce cost
improve performance
improve security
available in two flavours
free
paid
free version provides audit for
cost
performance
security
CloudTrail
important notes
As name indicates it will maintain trail of every action taken on AWS
useful for
logging
maintaining history based on API call
it is not enabled by default
can be enabled on a per region basis
track API call from
management console
CLI
SDK
other API
log can contain
identity of API caller
time of API call
Source IP address of API caller
request parameters
response element returned by AWS service
logs useful for
security analysis
resource change tracking
compliance auditing
logs can be stored on
cloud watch log
S3 :- cloud trail can be enabled across multiple AWS a/c. which can be pointed to single S3 bucket (with cross a/c access)
CloudWatch
important notes
it is a monitoring service for
AWS cloud resources
applications we run on AWS
it will take action for logs (mainly cloudTrail)
cloud trail logs can be sent to cloud watch logs for real time monitoring
useful for
tracking application performance
operational health
components
cloud watch logs
this will receive logs from cloud trail
filter logs based on keywords
cloud watch logs stored indefinitely
Alarm
notification by
send email
send SMS
change color
alarm history stored for 14 days
can be used for getting billing alarms also.
in real life situation we might have some specific budget each month for AWS account. when we set alarm for AWS resources and if specific threshold reached then we can receive notification
example
if yellow send email
if orange send email and SMS
if red send email, SMS and do some provisioning of server
it performs
collect logs with the help fo cloud watch log
monitor logs
track metrics
set alarm
automatically react to change in our AWS resources
monitor
compute
EC2 instance
auto scaling
networking
Elastic load balancer (ELB)
Route 53
cloud front
database
RDS instances
DynamoDB table
elasticache
Redshift
storage and content delivery
EBS volume
storage gateway
integration tools
SNS
SQS
other
custom metrics generated by our App and services
any log file generated by our application
estimated charges on AWS bill
opswork
limitations
cloudwatch metrics retentions
1 minute data point for 15 days
5 minute datapoints are available for 63 days
1 hour datapoints are available for 455 days