CloudTrail, CloudWatch, and AWS Config

CloudTrail, CloudWatch, and Amazon Web Services (AWS) Config are three services that can help one to ensure the health, performance, and security of their AWS resources and applications. CloudTrail logs read and write actions against AWS services in an account, giving a detailed record including the action, the resource affected and its region, who performed the action, and when. CloudTrail logs both API and non‐API actions. CloudTrail classifies events into management events and data events. CloudWatch lets one to collect, retrieve, and graph numeric performance metrics from AWS and non‐AWS resources. CloudWatch organizes metrics into namespaces. A CloudWatch alarm watches over a single metric and performs an action based on a change in its value. AWS Config tracks the configuration state of an AWS resources at a point in time. AWS Config uses configuration items to build a configuration history for each resource.