AWS Certified CloudOps Engineer - Associate
CloudTrail for Operations
The audit trail of who called which API: event history versus trails, the four event types and what each costs, organization trails, CloudTrail Lake, and wiring a trail into CloudWatch Logs so you can alarm on account activity.
Intermediate 20 minutes 6 Learning Objectives
- Distinguish what CloudTrail records from what CloudWatch records
- Compare event history with a trail on retention, scope, cost, and configurability
- Choose between management events, data events, network activity events, and Insights events
- Explain when an organization trail is the right answer instead of per-account trails
- Describe what CloudTrail Lake adds over a trail delivering to S3
- Build an alarm on account activity by sending a trail to CloudWatch Logs and adding a metric filter