Monitoring and Logging Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Monitoring and Logging flashcards as text
An organization needs to centralize CloudWatch Logs from 50 AWS accounts into a single Security account for SIEM ingestion. Which feature supports cross-account log streaming?
Answer: CloudWatch Subscription Filters with cross-account Kinesis Data Streams
CloudWatch Subscription Filters can send log data to a Kinesis Data Stream in another account by setting the appropriate resource policy, enabling cross-account log aggregation.
Which AWS service continuously records configuration changes to AWS resources and can trigger remediation when a resource drifts from a desired state?
Answer: AWS Config
AWS Config records resource configuration history and evaluates compliance against rules, with optional automatic remediation via Systems Manager Automation.
A team wants to detect anomalous spikes in Lambda error rates using machine learning without writing threshold rules. Which CloudWatch feature provides this?
Answer: CloudWatch Anomaly Detection
CloudWatch Anomaly Detection uses ML to model expected metric behavior and can create alarms that fire when values deviate from the predicted band.
During a blue/green deployment, which metric from an Application Load Balancer is most useful for determining when to shift 100% of traffic to the green environment?
Answer: HealthyHostCount for the green target group
HealthyHostCount for the green target group confirms all new instances have passed health checks and are ready to serve full traffic.
A DevOps engineer must ensure that all CloudWatch Logs data older than 30 days is exported to S3 for cost-efficient long-term storage. Which native mechanism supports this?
Answer: CloudWatch Logs export task (CreateExportTask API) scheduled via EventBridge
The CreateExportTask API exports a log group's data to S3 for a specified time range; scheduling it via EventBridge Scheduler automates the 30-day export.
Which CloudWatch dashboard widget type allows users to run a Log Insights query and display the results as a bar chart directly on the dashboard?
Answer: Log Insights query results widget
The Log Insights query results widget embeds a saved or inline Log Insights query in a CloudWatch dashboard and renders results as a table, bar, line, or pie chart.
A company's CodePipeline runs multiple parallel stages. The team wants one unified view showing stage durations and failure rates over the last 7 days. Which is the most scalable approach?
Answer: Use EventBridge to capture pipeline events, store in DynamoDB, and build an API-backed dashboard
EventBridge captures all pipeline state-change events; storing them in DynamoDB and exposing via an API provides a scalable, queryable source for a custom dashboard.