AWS decision-guides documentation change
Summary
Restructured documentation sections into bullet points with expanded descriptions for multiple AWS monitoring services (CloudWatch, CloudTrail, EventBridge, etc.). Added new guides/blog links and improved formatting consistency.
Security assessment
Added documentation for 'Secure monitoring of user workflow experience using CloudWatch Synthetics and AWS Secrets Manager' which demonstrates secure credential handling. Also added SIEM workshop content for security log analysis. These represent security-focused documentation additions but do not address specific vulnerabilities.
Diff
diff --git a/decision-guides/latest/monitoring-on-aws-how-to-choose/monitoring-on-aws-how-to-choose.md b/decision-guides/latest/monitoring-on-aws-how-to-choose/monitoring-on-aws-how-to-choose.md index 9b5d1506e..35e3c58af 100644 --- a//decision-guides/latest/monitoring-on-aws-how-to-choose/monitoring-on-aws-how-to-choose.md +++ b//decision-guides/latest/monitoring-on-aws-how-to-choose/monitoring-on-aws-how-to-choose.md @@ -211,4 +211,38 @@ Amazon CloudWatch - **Getting Started with Amazon CloudWatch** Monitor your AWS resources and the applications you run on AWS in real time using Amazon CloudWatch. You can use CloudWatch to collect and track metrics, which are variables you can measure for your resources and applications. [Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.html) |  **Getting started with Amazon CloudWatch Metrics** This guide discusses basic monitoring and detailed monitoring, how to graph metrics, and how to use CloudWatch anomaly detection. [Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/working_with_metrics.html) ----|--- - **Set up Container Insights on Amazon EKS and Kubernetes** Set up the Amazon CloudWatch Observability ESK add-on and ADTO on your EKS cluster to send metrics to CloudWatch. You will also learn how to set up Fluent Bit or Fluentd to send logs to CloudWatch Logs. [Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/deploy-container-insights-EKS.html) |  **Getting started with Amazon CloudWatch Application Insights** Learn how to use the console to enable CloudWatch Application Insights to manage your applications for monitoring. [Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/appinsights-getting-started.html) - **Using Container Insights** Learn how CloudWatch Container Insights collects, aggregates, and summarizes metrics and logs from your containerized applications and microservices. [Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContainerInsights.html) |  **Setting up Container Insights on Amazon ECS** Learn to configure cluster and service level metrics, deploy ADOT to collect EC2 instance level metrics, and set up FireLens to send logs to CloudWatch Logs. [Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/deploy-container-insights-ECS.html) + * **Getting Started with Amazon CloudWatch** + +Monitor your AWS resources and the applications you run on AWS in real time using Amazon CloudWatch. You can use CloudWatch to collect and track metrics, which are variables you can measure for your resources and applications. + +[Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.html) + + * **Getting started with Amazon CloudWatch Metrics** + +This guide discusses basic monitoring and detailed monitoring, how to graph metrics, and how to use CloudWatch anomaly detection. + +[Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/working_with_metrics.html) + + * **Set up Container Insights on Amazon EKS and Kubernetes** + +Set up the Amazon CloudWatch Observability ESK add-on and ADTO on your EKS cluster to send metrics to CloudWatch. You will also learn how to set up Fluent Bit or Fluentd to send logs to CloudWatch Logs. + +[Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/deploy-container-insights-EKS.html) + + * **Getting started with Amazon CloudWatch Application Insights** + +Learn how to use the console to enable CloudWatch Application Insights to manage your applications for monitoring. + +[Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/appinsights-getting-started.html) + + * **Using Container Insights** + +Learn how CloudWatch Container Insights collects, aggregates, and summarizes metrics and logs from your containerized applications and microservices. + +[Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContainerInsights.html) + + * **Setting up Container Insights on Amazon ECS** + +Learn to configure cluster and service level metrics, deploy ADOT to collect EC2 instance level metrics, and set up FireLens to send logs to CloudWatch Logs. + +[Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/deploy-container-insights-ECS.html) + + + @@ -219,3 +253,20 @@ Amazon CloudWatch Application Insights - **Getting started with Amazon CloudWatch Application Signals** In this guide, you will learn how to automatically instrument your applications on AWS so that you can monitor current application health and track long-term application performance against your business objectives. [Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html) |  **Amazon CloudWatch Application Signals for automatic instrumentation of your applications** This blog post provides an in-depth walk-through the AWS Management Console for Amazon CloudWatch Application Signals demonstrating how to collect telemetry for your EKS clusters. [Read the blog post](https://aws.amazon.com/blogs/aws/amazon-cloudwatch-application-signals-for-automatic-instrumentation-of-your-applications-preview/) ----|--- - **How to monitor application health using SLOs with Amazon CloudWatch Application Signals** This blog post demonstrates how Amazon CloudWatch Application signals enables you to automatically instrument and operate applications on AWS to track application performance against your most important objectives. [Read the blog post](https://aws.amazon.com/blogs/mt/how-to-monitor-application-health-using-slos-with-amazon-cloudwatch-application-signals/) | + * **Getting started with Amazon CloudWatch Application Signals** + +In this guide, you will learn how to automatically instrument your applications on AWS so that you can monitor current application health and track long-term application performance against your business objectives. + +[Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html) + + * **Amazon CloudWatch Application Signals for automatic instrumentation of your applications** + +This blog post provides an in-depth walk-through the AWS Management Console for Amazon CloudWatch Application Signals demonstrating how to collect telemetry for your EKS clusters. + +[Read the blog post](https://aws.amazon.com/blogs/aws/amazon-cloudwatch-application-signals-for-automatic-instrumentation-of-your-applications-preview/) + + * **How to monitor application health using SLOs with Amazon CloudWatch Application Signals** + +This blog post demonstrates how Amazon CloudWatch Application signals enables you to automatically instrument and operate applications on AWS to track application performance against your most important objectives. + +[Read the blog post](https://aws.amazon.com/blogs/mt/how-to-monitor-application-health-using-slos-with-amazon-cloudwatch-application-signals/) + + + @@ -226,2 +277,14 @@ Amazon CloudWatch Lambda Insights - **Introducing CloudWatch Lambda Insights** Learn how to create a few “Hello World” Lambda functions and monitor them using Lambda Insights. You will be using the AWS CDK to deploy the architecture. [Read the blog](https://aws.amazon.com/blogs/mt/introducing-cloudwatch-lambda-insights/) |  **Using Amazon CloudWatch Lambda Insights to Improve Operational Visibility** Learn how to use Lambda Insights to provide simple and convenient operation oversight and visibility into the behavior of your AWS Lambda functions. [Read the blog](https://aws.amazon.com/blogs/aws/using-amazon-cloudwatch-lambda-insights-to-improve-operational-visibility/) ----|--- + * **Introducing CloudWatch Lambda Insights** + +Learn how to create a few “Hello World” Lambda functions and monitor them using Lambda Insights. You will be using the AWS CDK to deploy the architecture. + +[Read the blog](https://aws.amazon.com/blogs/mt/introducing-cloudwatch-lambda-insights/) + + * **Using Amazon CloudWatch Lambda Insights to Improve Operational Visibility** + +Learn how to use Lambda Insights to provide simple and convenient operation oversight and visibility into the behavior of your AWS Lambda functions. + +[Read the blog](https://aws.amazon.com/blogs/aws/using-amazon-cloudwatch-lambda-insights-to-improve-operational-visibility/) + + + @@ -232,3 +295,20 @@ Amazon CloudWatch Logs - **Getting started with Amazon CloudWatch Logs** Learn how to install the unified CloudWatch agent and how to configure metrics collection with AWS CloudFormation. [Read the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_GettingStarted.html) |  **Analyzing log data with CloudWatch Logs Insights** This guide will demonstrate to get started with Logs Insights queries, visualize log data in in graphs, and adding queries to your dashboard. [Get started with the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html) ----|--- - **Amazon CloudWatch Logs Insights – Fast, Interactive Log Analytics** Use Logs Insights to utilize the data points, patterns, trends, and insights present in all the various logs created by AWS services to understand how your applications and AWS resources are behaving, identify room for improvement, and address operational issues. [Read the blog post](https://aws.amazon.com/blogs/aws/new-amazon-cloudwatch-logs-insights-fast-interactive-log-analytics/) | + * **Getting started with Amazon CloudWatch Logs** + +Learn how to install the unified CloudWatch agent and how to configure metrics collection with AWS CloudFormation. + +[Read the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_GettingStarted.html) + + * **Analyzing log data with CloudWatch Logs Insights** + +This guide will demonstrate to get started with Logs Insights queries, visualize log data in in graphs, and adding queries to your dashboard. + +[Get started with the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html) + + * **Amazon CloudWatch Logs Insights – Fast, Interactive Log Analytics** + +Use Logs Insights to utilize the data points, patterns, trends, and insights present in all the various logs created by AWS services to understand how your applications and AWS resources are behaving, identify room for improvement, and address operational issues. + +[Read the blog post](https://aws.amazon.com/blogs/aws/new-amazon-cloudwatch-logs-insights-fast-interactive-log-analytics/) + + + @@ -239,2 +319,14 @@ Amazon CloudWatch Synthetics - **Using synthetic monitoring** This guide demonstrates how to create canaries, configurable scripts that run on a schedule, providing sample code for canary scripts. [Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries.html) |  **Secure monitoring of user workflow experience using Amazon CloudWatch Synthetics and AWS Secrets Manager** How to create, deploy, and monitor synthetic monitoring solutions using Amazon CloudWatch Synthetics. [Read the blog post](https://aws.amazon.com/blogs/mt/secure-monitoring-of-user-workflow-experience-using-amazon-cloudwatch-synthetics-and-aws-secrets-manager/) ----|--- + * **Using synthetic monitoring** + +This guide demonstrates how to create canaries, configurable scripts that run on a schedule, providing sample code for canary scripts. + +[Explore the guide](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries.html) + + * **Secure monitoring of user workflow experience using Amazon CloudWatch Synthetics and AWS Secrets Manager** + +How to create, deploy, and monitor synthetic monitoring solutions using Amazon CloudWatch Synthetics. + +[Read the blog post](https://aws.amazon.com/blogs/mt/secure-monitoring-of-user-workflow-experience-using-amazon-cloudwatch-synthetics-and-aws-secrets-manager/) + + + @@ -245,3 +337,26 @@ Amazon EventBridge - **Getting started with Amazon EventBridge** Learn to create a basic rule to route events to a target. [Explore the guide](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-get-started.html) |  **Archive and replay Amazon EventBridge events** Create a function to use as the target for the EventBridge rule using the Lambda console. [Explore the guide](https://docs.aws.amazon.com/EventBridge/latest/userguide/eb-get-started.html) ----|--- - **Log the state of an Amazon EC2 instance using EventBridge** Create an AWS Lambda function to log state changes for an Amazon EC2 instance. You will log the launch of any new EC2 instance. [Use the tutorial](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-log-ec2-instance-state.html) |  **Building an event-driven application with Amazon EventBridge** Learn how to build and deploy and event-driving application using the AWS Serverless Application Model (AWS SAM) CLI. [Read the blog](https://aws.amazon.com/blogs/compute/building-an-event-driven-application-with-amazon-eventbridge/) + * **Getting started with Amazon EventBridge** + +Learn to create a basic rule to route events to a target. + +[Explore the guide](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-get-started.html) + + * **Archive and replay Amazon EventBridge events** + +Create a function to use as the target for the EventBridge rule using the Lambda console. + +[Explore the guide](https://docs.aws.amazon.com/latest/userguide/eb-get-started.html) + + * **Log the state of an Amazon EC2 instance using EventBridge** + +Create an AWS Lambda function to log state changes for an Amazon EC2 instance. You will log the launch of any new EC2 instance. + +[Use the tutorial](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-log-ec2-instance-state.html) + + * **Building an event-driven application with Amazon EventBridge** + +Learn how to build and deploy and event-driving application using the AWS Serverless Application Model (AWS SAM) CLI. + +[Read the blog](https://aws.amazon.com/blogs/compute/building-an-event-driven-application-with-amazon-eventbridge/) + + + @@ -252,4 +367,32 @@ AWS CloudTrail - **Getting started with AWS CloudTrail** AWS CloudTrail is an AWS service that helps you enable operational and risk auditing, governance, and compliance of your AWS account. Here's how to get started with it. [Explore the guide](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html) |  **Review AWS account activity** Learn how to review the AWS API activity in your AWS account for services that support CloudTrail. [Use the tutorial](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/tutorial-event-history.html) ----|--- - **Create a trail** Learn how to create a trail to log AWS API activity in all Regions including data and Insights events. [Use the tutorial](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/tutorial-trail.html) |  **AWS CloudTrail Log Monitoring workshop** Learn how to integrate CloudTrail logs into CloudWatch and use features such as CloudWatch Log Insights, CloudWatch Metric Filters, CloudWatch Metric Alarms and CloudWatch Dashboards. [Use the workshop](https://catalog.us-east-1.prod.workshops.aws/workshops/2e48b9fc-f721-4417-b811-962b7f31b61c/en-US) - **AWS CloudTrail best practices** Best practices for using CloudTrail to enable auditing across your organization. [Read the blog](https://aws.amazon.com/blogs/mt/aws-cloudtrail-best-practices/) | + * **Getting started with AWS CloudTrail** + +AWS CloudTrail is an AWS service that helps you enable operational and risk auditing, governance, and compliance of your AWS account. Here's how to get started with it. + +[Explore the guide](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html) + + * **Review AWS account activity** + +Learn how to review the AWS API activity in your AWS account for services that support CloudTrail. + +[Use the tutorial](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/tutorial-event-history.html) + + * **Create a trail** + +Learn how to create a trail to log AWS API activity in all Regions including data and Insights events. + +[Use the tutorial](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/tutorial-trail.html) + + * **AWS CloudTrail Log Monitoring workshop** + +Learn how to integrate CloudTrail logs into CloudWatch and use features such as CloudWatch Log Insights, CloudWatch Metric Filters, CloudWatch Metric Alarms and CloudWatch Dashboards. + +[Use the workshop](https://catalog.us-east-1.prod.workshops.aws/workshops/2e48b9fc-f721-4417-b811-962b7f31b61c/en-US) + + * **AWS CloudTrail best practices** + +Best practices for using CloudTrail to enable auditing across your organization. + +[Read the blog](https://aws.amazon.com/blogs/mt/aws-cloudtrail-best-practices/) + + + @@ -260,3 +403,20 @@ AWS Config - **Getting started with AWS Config** AWS Config provides a detailed view of the configuration of AWS resources in your AWS account. This explains how to get started using it. [Explore the guide](https://docs.aws.amazon.com/config/latest/developerguide/WhatIsConfig.html) |  **Setting up AWS Config (console)** Learn how to set up AWS Config in your AWS accounts using the AWS Management Console. [Explore the guide](https://docs.aws.amazon.com/config/latest/developerguide/gs-console.html) ----|--- - **Setting up AWS Config with the AWS CLI** Learn how to set up AWS Config in your AWS accounts using the AWS CLI. [Explore the guide](https://docs.aws.amazon.com/config/latest/developerguide/gs-cli.html) |