AWS CloudWatch

Problem statement:

We do not have central monitoring tool for AWS resources and compliance.

Solutions can be implemented with this service:
  1. CloudWatch provides data and actionable insights to monitor your applications, 
    respond to system-wide performance changes, optimize resource utilization,
    and get a view of operational health.
  2. Collects monitoring and operational data in the form of logs, metrics, and 
    events, providing you with a unified view of AWS resources, applications,
    and services that run on AWS and on-premises servers.
  3. Detecting anomalous behaviour in environments, set alarms, visualize logs 
    and metrics side by side, take automated actions, troubleshoot issues, and
    discover insights to keep your applications running smoothly.


Features of CloudWatch are:
1. Collect

A) Easily collect and store logs
B) Built-in metrics
C) Custom Metrics
D) Collect and aggregate container metrics and logs
E) Collect and aggregate Lambda metrics and logs

2. Monitor

A) Unified operational view with dashboards
B) Composite alarms
C) Logs and metrics correlation
D) Anomaly Detection

3. Analyze

A) Granular data and extended retention
B) Custom operations on metrics
C) Log analytics
D) Analyze container metrics, logs, and traces
E) Analyze Lambda metrics, logs, and traces
 
4. Compliance and Security
How the CloudWatch works
CloudWatch collects monitoring and operational data in the form of logs, metrics, 
and events, and visualizes it using automated dashboards so you can get a unified
view of your AWS resources, applications, and services that run in AWS.

To act quickly, you can set up automated actions to notify you if an alarm is
triggered and automatically start auto scaling, for example, to help reduce
mean-time-to-resolution. You can also dive deep and analyze your metrics, logs,
and traces, to better understand how to improve application performance.
Use Case

Creating rules to collect Security Hub findings and inform users to via SNS.
Once the findings are generated in security hub it is sent to CloudWatch and 
then triggers SNS to send notification on e-mail.
Other use cases are:

1. Proactive resource optimization
2. Log analytics
3. Application monitoring

Leave a Reply

Your email address will not be published. Required fields are marked *