Monitoring and Logging Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Monitoring and Logging flashcards as text
When configuring a CloudWatch Alarm, what does setting the 'Treat missing data as' option to 'breaching' cause?
Answer: The alarm transitions to ALARM state when data is missing, treating absence as a failure
Setting missing data to 'breaching' means the alarm treats absent data points as if the threshold were exceeded, triggering an ALARM state.
A Lambda function processes deployment events and writes structured JSON logs. Which CloudWatch feature lets the team count error events per minute without changing the function code?
Answer: CloudWatch Metric Filters
Metric Filters scan incoming log data for patterns and increment a custom metric each time a match is found, requiring no code changes.
Which X-Ray concept represents the end-to-end journey of a single request as it passes through multiple services?
Answer: Trace
A Trace in X-Ray is the complete collection of segments and subsegments generated by a single request across all services it touches.
A DevOps engineer needs to alert on-call staff when deployment error rates exceed 5% over a 5-minute window. The alerting must include a runbook link. Which SNS feature supports this?
Answer: SNS message attributes in the alarm description or action notification
CloudWatch Alarm descriptions and SNS message bodies can include runbook URLs, which are delivered to on-call staff via the SNS notification.
Which CloudWatch Logs feature identifies which log sources (IP addresses, users, URLs) contribute most to log volume or error counts?
Answer: Contributor Insights
Contributor Insights analyzes log data to identify the top contributors (heavy hitters) to a metric, such as the IPs generating the most errors.
A team runs canary deployments on ECS and wants to automatically roll back if the p99 latency of the new task version exceeds 2 seconds. Which service combination enables this?
Answer: CodeDeploy deployment group with CloudWatch Alarm-based rollback triggers
CodeDeploy deployment groups support CloudWatch Alarm-based automatic rollback; if the alarm fires during deployment, CodeDeploy reverts to the previous version.
What is the purpose of CloudWatch Embedded Metrics Format (EMF)?
Answer: To allow applications to publish high-cardinality custom metrics as structured log events without a separate API call
EMF lets applications write structured JSON log lines that CloudWatch automatically parses and converts into custom metrics asynchronously.