AWS AmazonCloudWatch documentation change
Summary
Restructured documentation to add new sections about operational visibility, APM, infrastructure monitoring, logs, cross-account monitoring, and network monitoring capabilities. Removed older sections about accessing CloudWatch and related services.
Security assessment
The changes primarily reorganize content and expand monitoring feature descriptions. No explicit security vulnerabilities, IAM policies, encryption, or access control mechanisms are mentioned. New sections focus on observability and operational tooling rather than security controls.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.md b/AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.md index b4a75c8b8..3e2e508eb 100644 --- a//AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.md +++ b//AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.md @@ -5 +5 @@ -Accessing CloudWatchRelated AWS servicesBilling and costs +Operational visibility with metrics, alarms, and dashboardsApplication performance monitoring (APM)Infrastructure monitoringCollect, store, and query logsUse the CloudWatch agent to gather metrics, logs, and traces from Amazon EC2 fleetsCross-account monitoringSolutions catalogCloudWatch network monitoringBilling and costsResources @@ -9 +9 @@ Accessing CloudWatchRelated AWS servicesBilling and costs -Amazon CloudWatch monitors your Amazon Web Services (AWS) resources and the applications you run on AWS in real time. You can use CloudWatch to collect and track metrics, which are variables you can measure for your resources and applications. +Amazon CloudWatch monitors your Amazon Web Services (AWS) resources and the applications you run on AWS in real time, and offers many tools to give you system-wide observability of your application performance, operational health, and resource utilization. @@ -11 +11 @@ Amazon CloudWatch monitors your Amazon Web Services (AWS) resources and the appl -The CloudWatch home page automatically displays metrics about every AWS service you use. You can additionally create custom dashboards to display metrics about your custom applications, and display custom collections of metrics that you choose. +###### Topics @@ -13 +13 @@ The CloudWatch home page automatically displays metrics about every AWS service -You can create alarms that watch metrics and send notifications or automatically make changes to the resources you are monitoring when a threshold is breached. For example, you can monitor the CPU usage and disk reads and writes of your Amazon EC2 instances and then use that data to determine whether you should launch additional instances to handle increased load. You can also use this data to stop under-used instances to save money. + * Operational visibility with metrics, alarms, and dashboards @@ -15 +15 @@ You can create alarms that watch metrics and send notifications or automatically -With CloudWatch, you gain system-wide visibility into resource utilization, application performance, and operational health. + * Application performance monitoring (APM) @@ -17 +17 @@ With CloudWatch, you gain system-wide visibility into resource utilization, appl -## Accessing CloudWatch + * Infrastructure monitoring @@ -19 +19 @@ With CloudWatch, you gain system-wide visibility into resource utilization, appl -You can access CloudWatch using any of the following methods: + * Collect, store, and query logs @@ -21 +21 @@ You can access CloudWatch using any of the following methods: - * **Amazon CloudWatch console** – [https://console.aws.amazon.com/cloudwatch/](https://console.aws.amazon.com/cloudwatch/) + * Use the CloudWatch agent to gather metrics, logs, and traces from Amazon EC2 fleets @@ -23 +23 @@ You can access CloudWatch using any of the following methods: - * **AWS CLI** – For more information, see [Getting Set Up with the AWS Command Line Interface](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-getting-set-up.html) in the _AWS Command Line Interface User Guide_. + * Cross-account monitoring @@ -25 +25 @@ You can access CloudWatch using any of the following methods: - * **CloudWatch API** – For more information, see the [Amazon CloudWatch API Reference](http://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/Welcome.html). + * Solutions catalog @@ -27 +27 @@ You can access CloudWatch using any of the following methods: - * **AWS SDKs** – For more information, see [Tools for Amazon Web Services](http://aws.amazon.com/tools). + * Network and internet monitoring @@ -28,0 +29 @@ You can access CloudWatch using any of the following methods: + * Billing and costs @@ -29,0 +31 @@ You can access CloudWatch using any of the following methods: + * Amazon CloudWatch resources @@ -32 +33,0 @@ You can access CloudWatch using any of the following methods: -## Related AWS services @@ -34 +34,0 @@ You can access CloudWatch using any of the following methods: -The following services are used along with Amazon CloudWatch: @@ -36 +36 @@ The following services are used along with Amazon CloudWatch: - * **Amazon Simple Notification Service (Amazon SNS)** coordinates and manages the delivery or sending of messages to subscribing endpoints or clients. You use Amazon SNS with CloudWatch to send messages when an alarm threshold has been reached. For more information, see [Setting up Amazon SNS notifications](./Notify_Users_Alarm_Changes.html#US_SetupSNS). +## Operational visibility with metrics, alarms, and dashboards @@ -38 +38 @@ The following services are used along with Amazon CloudWatch: - * **Amazon EC2 Auto Scaling** enables you to automatically launch or terminate Amazon EC2 instances based on user-defined policies, health status checks, and schedules. You can use a CloudWatch alarm with Amazon EC2 Auto Scaling to scale your EC2 instances based on demand. For more information, see [Dynamic Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scale-based-on-demand.html) in the _Amazon EC2 Auto Scaling User Guide_. +[Metrics](./working_with_metrics.html) collect and track key performance data at user-defined intervals. [Many AWS services](./aws-services-cloudwatch-metrics.html) automatically report metrics into CloudWatch, and you can also [publish custom metrics](./publishingMetrics.html) in CloudWatch from your applications. @@ -40 +40 @@ The following services are used along with Amazon CloudWatch: - * **AWS CloudTrail** enables you to monitor the calls made to the Amazon CloudWatch API for your account, including calls made by the AWS Management Console, AWS CLI, and other services. When CloudTrail logging is turned on, CloudWatch writes log files to the Amazon S3 bucket that you specified when you configured CloudTrail. For more information, see [Logging Amazon CloudWatch API and console operations with AWS CloudTrail](./logging_cw_api_calls.html). +[Dashboards](./CloudWatch_Dashboards.html) offer a unified view of your resources and applications with visualizations of your metrics and logs in a single location. You can also [share dashboards](./cloudwatch-dashboard-sharing.html) across accounts and Regions for enhanced operational awareness. CloudWatch provides [curated automatic dashboards](./GettingStarted.html) for many AWS services, so that you don't have to build them yourself. @@ -42 +42 @@ The following services are used along with Amazon CloudWatch: - * **AWS Identity and Access Management (IAM)** is a web service that helps you securely control access to AWS resources for your users. Use IAM to control who can use your AWS resources (authentication) and what resources they can use in which ways (authorization). For more information, see [Identity and access management for Amazon CloudWatch](./auth-and-access-control-cw.html). +You can set up [alarms](./AlarmThatSendsEmail.html) that continuously monitor CloudWatch metrics against user-defined thresholds. They can automatically alert you to breaches of the thresholds, and can also automatically respond to changes in your resources' behavior by [triggering automated actions](./Acting_Alarm_Changes.html). @@ -43,0 +44 @@ The following services are used along with Amazon CloudWatch: +## Application performance monitoring (APM) @@ -44,0 +46 @@ The following services are used along with Amazon CloudWatch: +With [Application Signals](./CloudWatch-Application-Monitoring-Sections.html) you can automatically detect and monitor your applications' key performance indicators like latency, error rates, and request rates without manual instrumentation or code changes. Application Signals also provides curated dashboards so you can begin monitoring with a minimum of setup. @@ -45,0 +48,42 @@ The following services are used along with Amazon CloudWatch: +[CloudWatch Synthetics](./CloudWatch_Synthetics_Canaries.html) complements this by enabling you to proactively monitor your endpoints and APIs through configurable scripts called _canaries_ that simulate user behavior and alert you to availability issues or performance degradation before they impact real users. You can also use [CloudWatch RUM](./CloudWatch-RUM.html) to gather performance data from real user sessions. + +Use [Service Level Objectives (SLOs)](./CloudWatch-ServiceLevelObjectives.html) in CloudWatch to define, track, and alert on specific reliability targets for your applications, helping you maintain service quality commitments by setting error budgets and monitoring SLO compliance over time. + +## Infrastructure monitoring + +Many AWS services automatically send basic metrics to CloudWatch for free. [Services that send metrics are listed here](./aws-services-cloudwatch-metrics.html). Additionally, CloudWatch provides additional monitoring capabilities for several key pieces of AWS infrastructure: + + * [Database Insights](./Database-Insights.html) allows you to monitor database performance metrics in real time, analyze SQL query performance, and troubleshoot database load issues for AWS database services. + + * [Lambda Insights](./Lambda-Insights.html) provides system-level metrics for Lambda functions, including memory and CPU utilization tracking, and cold start detection and analysis. + + * [Container Insights](./ContainerInsights.html) allows you to collect and analyze metrics from containerized applications, on Amazon ECS clusters, Amazon EKS clusters, and self-managed Kubernetes clusters on Amazon EC2. + + + + +## Collect, store, and query logs + +CloudWatch Logs offers a suite of powerful features for comprehensive log management and analysis. Logs ingested from AWS services and custom applications are stored in [log groups and streams](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html) for easy organization. Use [CloudWatch Logs Insights](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html) to perform interactive, fast queries on your log data, with a choice of three query languages including SQL and PPL. Use [log anomaly detection](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/LogsAnomalyDetection) to find unusual patterns in log events in a log group, which can indicate issues. Create [metric filters](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/MonitoringLogData) to extract numerical values from logs and generate CloudWatch metrics, which you can use for alerting and dashboards. Set up [subscription filters](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Subscriptions) to process and analyze logs in real-time or route them to other services like Amazon S3 or Firehose. + +## Use the CloudWatch agent to gather metrics, logs, and traces from Amazon EC2 fleets + +Use the [CloudWatch agent](./Install-CloudWatch-Agent.html) to collect detailed system metrics about processes, CPU, memory, disk usage, and network performance from your fleets of Amazon EC2 instances and on-premises servers. You can also collect and monitor custom metrics from your applications, aggregate logs from multiple sources, and configure alarms based on the collected data. You can also use the agent to gather [GPU metrics](./CloudWatch-Agent-NVIDIA-GPU.html). The agent supports both Windows and Linux operating systems and can integrate with Systems Manager for centralized configuration management. + +## Cross-account monitoring + +[CloudWatch cross-account observability](./CloudWatch-Cross-Account-Methods.html) lets you set up a central monitoring account to monitor and troubleshoot applications that span multiple accounts. From the central account, you can view metrics, logs, and traces from source accounts across your organization. This centralized approach enables you to create cross-account dashboards, set up alarms that watch metrics from multiple accounts, and perform root-cause analysis across account boundaries. With CloudWatch cross-account observability, you can link source accounts either individually or link them automatically through AWS Organizations. + +## Solutions catalog + +CloudWatch offers a catalog of readily available configurations to help you quickly implement monitoring for various AWS services and common workloads, such as [Java Virtual Machines (JVM)](./Solution-JVM-On-EC2.html), [NVIDIA GPU](./Solution-NVIDIA-GPU-On-EC2.html), [Apache Kafka](./Solution-Kafka-On-EC2.html), [Apache Tomcat](./Solution-Tomcat-On-EC2.html), and [NGINX](./Solution-NGINX-On-EC2.html). These solutions provide focused guidance, including instructions for installing and configuring the CloudWatch agent, deploying pre-defined custom dashboards, and setting up related alarms. + +## Network and internet monitoring + +CloudWatch provides comprehensive network and internet monitoring capabilities through CloudWatch Network Monitoring. + +[Internet Monitor](./CloudWatch-InternetMonitor.html) uses AWS global networking data to analyze internet performance and availability between your applications and end users. With an internet monitor, you can identify or get notifications for increased latency or regional disruptions that impact your customers. Internet monitors work by analyzing your VPC flow logs to provide automated insights about network traffic patterns and performance. You can also get suggestions for how to optimize application performance for your clients. + +[Network Flow Monitor](./CloudWatch-NetworkFlowMonitor.html) displays network performance information gathered by lightweight software agents that you install on your instances. Using a flow monitor, you can quickly visualize packet loss and latency of your network connections over a time frame that you specify. Each monitor also generates a network health indicator (NHI), which tells you whether there were AWS network issues for the network flows tracked by your monitor during the time period that you're evaluating. + +When you connect by using AWS Direct Connect, you can use synthetic monitors in [Network Synthetic Monitor](./what-is-network-monitor.html) to proactively monitor network connectivity by running synthetic tests between a VPC and on-premises endpoints. When you create a synthetic monitor, you specify probes by providing a VPC subnet and on-premises IP addresses. AWS creates and manages the infrastructure in the background that is required to perform round-trip time and packet loss measurements with the probes. These tests detect issues with connectivity, DNS, and latency before they impact your applications, so that you can take action to improve your end users’ experience. @@ -52,0 +97,14 @@ For information that can help you analyze your bill and possibly optimize and re +## Amazon CloudWatch resources + +The following related resources can help you as you work with this service. + +Resource | Description +---|--- +[Amazon CloudWatch FAQs](http://aws.amazon.com/cloudwatch/faqs/) | The FAQ covers the top questions developers have asked about this product. +[AWS Developer Center](http://aws.amazon.com/developer) | A central starting point to find documentation, code examples, release notes, and other information to help you build innovative applications with AWS. +[AWS Management Console](http://aws.amazon.com/console/) | The console allows you to perform most of the functions of Amazon CloudWatch and various other AWS offerings without programming. +[Amazon CloudWatch Discussion Forums](https://forums.aws.amazon.com/forum.jspa?forumID=138) | Community-based forum for developers to discuss technical questions related to Amazon CloudWatch. +[AWS Support](https://console.aws.amazon.com/support/home#/) | The hub for creating and managing your AWS Support cases. Also includes links to other helpful resources, such as forums, technical FAQs, service health status, and AWS Trusted Advisor. +[Amazon CloudWatch product information](http://aws.amazon.com/cloudwatch/) | The primary web page for information about Amazon CloudWatch. +[Contact Us](http://aws.amazon.com/contact-us/) | A central contact point for inquiries concerning AWS billing, account, events, abuse, etc. + @@ -59 +117 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -How CloudWatch works +Getting set up