08. CloudTrail, CloudWatch, Config

CloudTrail, CloudWatch, Config

•    성능모니터링

•    애플리케이션문제점감지

•    보안문제점감지

•    로그이벤트모니터링

•    Aws 리소스인벤토리관리

•    Cloudtrail : aws 리소스와관련된모든읽기쓰기기록

•    Cloudwatch : 숫자형성능지표및메트릭수집 : threshold – alert

•    Config : 리소스의환경변경설정내역시간에따라어떻게

변화했는지, 비교및기준넘어가면 alert

https://aws.amazon.com/products/storage/

CloudTrail

•    Visibility into your AWS account activity is a key aspect of security and operational best practices

•    CloudTrail uses the following file name format for the log file objects that it delivers to your Amazon S3 bucket

https://docs.aws.amazon.com/ko_kr/awscloudtrail/latest/userguide/cloudtrail-user-guide.html https://tech.cloud.nongshim.co.kr/2018/10/15/2-%EB%84%A4%ED%8A%B8%EC%9B%8C%ED%81%AC-

%EA%B5%AC%EC%B6%95%ED%95%98%EA%B8%B0-3-cloudtrail-%EC%83%9D%EC%84%B1%ED%95%98%EA%B8%B0/

CloudWatch

• monitors your Amazon Web Services (AWS) resources and the applications

https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.html

Config

• provides a detailed view of the configuration of AWS resources

https://docs.aws.amazon.com/config/latest/developerguide/WhatIsConfig.html

QnA