[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cheat-sheet---en":3,"domain-info---en":3,"topic-info----en":3,"lesson-aws-certified-cloudops-engineer-associate-monitoring-logging-performance-cloudwatch-metrics-and-logs-cloudtrail-for-operations-en":4,"prev-aws-certified-cloudops-engineer-associate-monitoring-logging-performance-cloudwatch-metrics-and-logs-cloudtrail-for-operations-en":20,"next-aws-certified-cloudops-engineer-associate-monitoring-logging-performance-cloudwatch-metrics-and-logs-cloudtrail-for-operations-en":31},null,{"locked":5,"reason":6,"meta":7,"item":3},true,"paywall",{"title":8,"description":9,"isFree":10,"estimatedMinutes":11,"difficulty":12,"learningObjectives":13},"CloudTrail for Operations","The audit trail of who called which API: event history versus trails, the four event types and what each costs, organization trails, CloudTrail Lake, and wiring a trail into CloudWatch Logs so you can alarm on account activity.",false,20,"intermediate",[14,15,16,17,18,19],"Distinguish what CloudTrail records from what CloudWatch records","Compare event history with a trail on retention, scope, cost, and configurability","Choose between management events, data events, network activity events, and Insights events","Explain when an organization trail is the right answer instead of per-account trails","Describe what CloudTrail Lake adds over a trail delivering to S3","Build an alarm on account activity by sending a trail to CloudWatch Logs and adding a metric filter",{"locked":5,"reason":6,"meta":21,"item":3},{"title":22,"description":23,"isFree":10,"estimatedMinutes":11,"difficulty":12,"learningObjectives":24},"Deploying the CloudWatch Agent","Why memory and disk metrics never appear on their own, and how to install, configure, and troubleshoot the unified CloudWatch agent across an EC2 fleet using Systems Manager and Parameter Store.",[25,26,27,28,29,30],"Explain why EC2 cannot publish in-guest metrics without an agent","Identify the IAM permissions the agent needs on the instance and on the machine that stores its configuration","Install the agent across a fleet using Systems Manager rather than by hand","Read and modify the three sections of an agent configuration file","Store an agent configuration in Parameter Store and load it with amazon-cloudwatch-agent-ctl","Diagnose the common causes of an agent that reports nothing",{"locked":5,"reason":6,"meta":32,"item":3},{"title":33,"description":34,"isFree":10,"estimatedMinutes":11,"difficulty":12,"learningObjectives":35},"Container Insights, Prometheus, and Grafana","Getting container-level telemetry out of ECS and EKS: how Container Insights collects performance log events, what enhanced observability adds, and when to send metrics to Amazon Managed Service for Prometheus and visualize them in Amazon Managed Grafana instead.",[36,37,38,39,40,41],"Explain why EC2 instance metrics cannot answer questions about individual containers","Describe how Container Insights turns performance log events into CloudWatch metrics","Enable Container Insights on ECS at the account and cluster level, and on EKS with the observability add-on","Compare standard Container Insights with Container Insights with enhanced observability","Explain the role of Amazon Managed Service for Prometheus and where remote write fits","Choose between Container Insights and a Prometheus and Grafana stack for a given requirement"]