Monitoring and Logging Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Monitoring and Logging flashcards as text
A DevOps team wants to automatically remediate EC2 instances that fail health checks without human intervention. Which AWS service combination best achieves this?
Answer: CloudWatch Alarms + EventBridge + Systems Manager Automation
CloudWatch Alarms detect the failure, EventBridge routes the event, and Systems Manager Automation runbooks execute the remediation steps.
Which CloudWatch feature allows you to search, analyze, and visualize log data interactively using a purpose-built query language?
Answer: CloudWatch Log Insights
CloudWatch Log Insights provides an interactive query interface with its own query language to analyze log data in real time.
A pipeline deployment causes elevated 5xx errors. The team needs to correlate ALB access logs with Lambda function logs across a 15-minute window. Which tool provides the best cross-service log correlation?
Answer: AWS X-Ray with trace ID propagation
X-Ray propagates trace IDs across services, enabling end-to-end correlation of requests through ALB, Lambda, and other components.
What is the maximum retention period you can configure for a CloudWatch Log Group?
Answer: Logs are retained indefinitely by default unless a retention policy is set
By default, CloudWatch Log Groups retain logs indefinitely; you must explicitly set a retention policy to limit storage duration.
A company uses AWS CodePipeline and wants pipeline execution metrics (success rate, duration) to appear in a central dashboard. Which approach is most operationally efficient?
Answer: Use CodePipeline EventBridge events to push custom metrics to CloudWatch, then build a dashboard
EventBridge captures CodePipeline state-change events; a Lambda function can extract duration and status and publish custom CloudWatch metrics for dashboarding.
Which AWS service provides pre-built runbooks for common operational tasks like patching and is triggered automatically by CloudWatch Alarms?
Answer: AWS Systems Manager Automation
Systems Manager Automation contains AWS-managed and custom runbooks that can be invoked by CloudWatch Alarms via EventBridge targets.
A team wants to detect when any IAM policy is modified in their account and trigger a notification within seconds. Which combination is most appropriate?
Answer: CloudTrail + CloudWatch Logs metric filter + CloudWatch Alarm + SNS
CloudTrail logs IAM API calls; a metric filter detects the specific event, a CloudWatch Alarm fires, and SNS sends the notification in near real time.