Instiq
Chapter 1 · Monitoring, Logging, and Remediation·v2.0.0·Updated 6/5/2026·~8 min

What's changed: Deepened SOA-C02 Chapter 1 to Associate depth (tables, scenarios, FAQ, traps; localized figures)

1.4In-scope services for monitoring, logging, and remediation

Key points

A roundup of in-scope SOA-C03 services for monitoring, logging, analytics, and observability.

1.4.1In-scope services for monitoring, logging, and remediation

In the monitoring/logging/remediation domain, beyond CloudWatch, know these in-scope services. Audit trails of API activity are AWS CloudTrail; resource configuration change history and compliance evaluation are AWS Config. For log/data analysis: Amazon Athena (serverless SQL on S3), Amazon Data Firehose (no-code delivery of logs/data to S3, OpenSearch, etc.), and VPC Flow Logs for recording network traffic. For observability dashboards/metrics, use the fully managed Amazon Managed Grafana and Amazon Managed Service for Prometheus.

Diagram grouping audit/record (CloudTrail/Config/VPC Flow Logs), analytics (Athena/Data Firehose), and observability (Managed Grafana/Managed Service for Prometheus).
Monitoring/logging/remediation services

1.4.2Section summary

  • Audit/config: CloudTrail (API) / Config (configuration/compliance) / VPC Flow Logs (traffic)
  • Analytics/observability: Athena (SQL on S3) / Data Firehose (delivery) / Managed Grafana・Managed Service for Prometheus

Sign in to track progress — Log in.

Quick check

(just a quick review)

Q1. Which is the fully managed Grafana service for visualizing metrics and logs?

Q2. Which records resource configuration change history and continuously evaluates compliance?

Check your understandingPractice questions for Chapter 1: Monitoring, Logging, and Remediation