Skip to main content

Scenario answers

  • Missing EC2 memory: use the CloudWatch agent.
  • Known log pattern alarm: metric filter plus alarm.
  • Continuous log routing: subscription filter.
  • API principal investigation: CloudTrail.
  • Resource-state timeline: AWS Config.
  • Seasonal threshold: anomaly detection plus hard safety alarm.
  • Duplicate pages: composite alarm while retaining component alarms.
  • Dynamic fleet: Metrics Insights or an automatically aggregated metric.
  • Cross-account operations: cross-account observability plus a separate protected archive.