CloudTrail, CloudWatch, and AWS Config

CloudTrail, CloudWatch, and Amazon Web Services (AWS) Config are three services that can help cloud professionals ensure the health, performance, and security of their AWS resources and applications. CloudTrail logs read and write actions against AWS services in cloud professionals' account, giving them a detailed record including the action, the resource affected and its region, who performed the action, and when. Management events include operations that a principal executes against an AWS resource. The chapter explains the difference between management events and data events. CloudTrail provides a means to ensure that no log files were modified or deleted after creation. CloudWatch organizes metrics into namespaces. CloudWatch lets cloud professionals perform various mathematical functions against metrics and graph them as a new time series. CloudWatch Logs stores log eventsthat are records of activity recorded by an application or AWS resource.