โ† All AWS Flashcard Decks

Monitoring and Logging Flashcards

7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Monitoring and Logging flashcards as text
  1. An organization needs to centralize CloudWatch Logs from 50 AWS accounts into a single Security account for SIEM ingestion. Which feature supports cross-account log streaming?

    Answer: CloudWatch Subscription Filters with cross-account Kinesis Data Streams

    CloudWatch Subscription Filters can send log data to a Kinesis Data Stream in another account by setting the appropriate resource policy, enabling cross-account log aggregation.

  2. Which AWS service continuously records configuration changes to AWS resources and can trigger remediation when a resource drifts from a desired state?

    Answer: AWS Config

    AWS Config records resource configuration history and evaluates compliance against rules, with optional automatic remediation via Systems Manager Automation.

  3. A team wants to detect anomalous spikes in Lambda error rates using machine learning without writing threshold rules. Which CloudWatch feature provides this?

    Answer: CloudWatch Anomaly Detection

    CloudWatch Anomaly Detection uses ML to model expected metric behavior and can create alarms that fire when values deviate from the predicted band.

  4. During a blue/green deployment, which metric from an Application Load Balancer is most useful for determining when to shift 100% of traffic to the green environment?

    Answer: HealthyHostCount for the green target group

    HealthyHostCount for the green target group confirms all new instances have passed health checks and are ready to serve full traffic.

  5. A DevOps engineer must ensure that all CloudWatch Logs data older than 30 days is exported to S3 for cost-efficient long-term storage. Which native mechanism supports this?

    Answer: CloudWatch Logs export task (CreateExportTask API) scheduled via EventBridge

    The CreateExportTask API exports a log group's data to S3 for a specified time range; scheduling it via EventBridge Scheduler automates the 30-day export.

  6. Which CloudWatch dashboard widget type allows users to run a Log Insights query and display the results as a bar chart directly on the dashboard?

    Answer: Log Insights query results widget

    The Log Insights query results widget embeds a saved or inline Log Insights query in a CloudWatch dashboard and renders results as a table, bar, line, or pie chart.

  7. A company's CodePipeline runs multiple parallel stages. The team wants one unified view showing stage durations and failure rates over the last 7 days. Which is the most scalable approach?

    Answer: Use EventBridge to capture pipeline events, store in DynamoDB, and build an API-backed dashboard

    EventBridge captures all pipeline state-change events; storing them in DynamoDB and exposing via an API provides a scalable, queryable source for a custom dashboard.