Monitoring, Audit & Governance

Metrics — CPU, Network, Disk for EC2 by default (high-level). RAM is NOT collected by default — use CloudWatch Agent.

Units

Practice questions

Generated from this module’s study material.

1. What best describes "CloudWatch Container Insights" in this context?

operations on resources (CreateVPC, AttachRolePolicy). Logged by default.auto-remediate non-compliant resources using SSM Automation Documents.query language for log analysis. Can query across multiple log groups.ECS, EKS, Kubernetes, Fargate metrics and logs.

2. What best describes "CloudWatch Contributor Insights" in this context?

evaluate resources. 75+ managed rules, or custom Lambda-based rules.analyzes normal management events to baseline, then detects anomalies.log groups → log streams → log events. Can send to S3, Kinesis, Lambda, OpenSearch. Logs encrypted by default.find top-N contributors from log data (e.g., top IPs).

How to use this

Open a unit and mark it complete when you are ready to move on.

Module progress

0/0 complete · 0%

Back to modules Next module: Resilience & DR