What's changed: In-scope coverage (fix): added a Trusted Advisor best-practice-checks block to §4.3 (closes an Axis-B textbook gap)
4.2Log Management
Understand log collection and analysis—CloudWatch Logs, Logs Insights (queries), metric filters, subscription filters, and centralized logging (Amazon Data Firehose → S3/OpenSearch). Gain insight and detection from logs.
Logs are about collecting, searching, analyzing, and centralizing. Centered on CloudWatch Logs, leverage filters and streaming.
4.2.1Log collection and analysis
- CloudWatch Logs: aggregate logs with retention; collect from agents/services.
- Logs Insights: analyze logs fast with SQL-like queries.
- Metric filters: turn log patterns (e.g., ERROR) into metrics to drive alarms.
- Subscription filters: stream logs in real time to Firehose/Lambda, centralizing to S3/OpenSearch.
Common on DOP-C02: query analysis = Logs Insights, alarm on log patterns = metric filters, real-time forwarding/centralization = subscription filters → Firehose → S3/OpenSearch. Org-wide log centralization is typically subscription filters + Firehose.
Continue reading — free sign-up
You're reading the free preview. Sign up free to read this section in full, plus every chapter (including 4+) and all questions.