1Monitoring, Logging, and Remediation
- 1.1CloudWatch Metrics and Alarms
Understand monitoring ops: CloudWatch metrics, alarm states (OK/ALARM/INSUFFICIENT_DATA) and thresholds, actions (SNS notify, Auto Scaling, EC2 action), and in-guest metrics via the CloudWatch agent. The starting point for "Monitoring, Logging, and Remediation" in SOA-C02.
- 1.2Log Aggregation and Audit (CloudWatch Logs and CloudTrail)
Understand aggregating app/OS logs with CloudWatch Logs and Logs Insights, auditing API activity (who did what) with CloudTrail, and when to use each.
- 1.3Automated Remediation (EventBridge and Systems Manager)
Understand event routing with EventBridge, automated remediation with Systems Manager Automation (runbooks), and Systems Manager ops features (patch management, Run Command, Parameter Store).

