1. Amazon Cloud Watch
2. Amazon Cloud Tail
3. Amazon VPC flow log
Through the monitoring system we can learn :
System running status
Resource utilization
Application performance
Security situation
Costs

Amazon CloudWatch
https://ap-southeast-1.console.aws.amazon.com/cloudwatch/home?®ion=ap-southeast-1#home:
Main function:
Standard: Metric
Log: Log
Alarm: Alarm
Event: Event





Amazon CloudWatch vs CloudTrail
|
| AWS CloudWatch | AWS CloudTrail |
|---|---|
| Focus on what’s happening on AWS resources | Focus on what is being done on AWS and by whom |
| A monitoring service for AWS resources and applications | Log API activity in the AWS account |
| Track metrics and monitor log files, set alerts for various events | Tracking actions to provide greater visibility into user activity |
| Can log your application | Provides information about what is happening in your AWS account |
| Indicators are provided in one-minute intervals for detailed monitoring,The 5-minute interval is used for basic monitoring | Monitoring is delivered within 15 minutes of the API call |
| Store data in your own dashboard in the form of metrics and logs | You can centralize all logs across partitions or even across multiple accounts and store them in S3 buckets |
| Free basic monitoring resources such as EC2 instance RDS are provided by default | Create an AWS account and work from there |
VPC Flow Log
Why use it
5. Troubleshooting Connection Problems
6. Tests network access rules
7. Monitor the flow
8. Detect and investigate security incidents
