</>Học Dev
Bài học

Tuần 8 - Ngày 1: Monitoring và Logging

Tuần 8 – Ngày 1

Tuần 8 - Ngày 1: Monitoring và Logging

1. CloudWatch Deep Dive

┌─────────────────────────────────────────────────────────┐│CLOUDWATCHCOMPONENTS││││METRICS:││├──Standard(1-minutefordetailed)││├──Custom(PutMetricDataAPI)││└──High-resolution(1-second)││││LOGS:││├──LogGroups→LogStreams→LogEvents││├──MetricFilters││├──SubscriptionFilters││└──LogInsights(querylanguage)││││ALARMS:││├──MetricAlarms││├──CompositeAlarms││└──Actions:SNS,AutoScaling,EC2││││DASHBOARDS:││└──Cross-account,cross-region││││EVENTS(EventBridge):││└──Rules→Targets(Lambda,SNS,etc.)│└─────────────────────────────────────────────────────────┘

2. CloudWatch Logs Architecture

┌─────────────────────────────────────────────────────────┐│LOGSDESTINATIONS││││Sources:││├──EC2(CloudWatchAgent)││├──Lambda(automatic)││├──VPCFlowLogs││├──APIGateway││└──Manymore...││││Processing:││┌─────────────────┐│││CloudWatchLogs│││└────────┬────────┘│││││SubscriptionFilter│││││┌─────┴─────┬─────────┬─────────┐││▼▼▼▼││KinesisLambdaOpenSearchFirehose││StreamsService→S3│└─────────────────────────────────────────────────────────┘

3. X-Ray

Distributed Tracing:
- Trace requests across services
- Service map visualization
- Performance bottleneck identification

Components:
- X-Ray SDK (in application)
- X-Ray Daemon (collects and sends traces)
- X-Ray Console (analysis)

Sampling:
- First request each second: traced
- 5% of additional requests: traced
- Custom sampling rules available

4. CloudTrail

┌─────────────────────────────────────────────────────────┐│CLOUDTRAIL││││EventTypes:││├──ManagementEvents(default)│││└──APIcalls(CreateBucket,RunInstances)││├──DataEvents(extracost)│││└──S3objectoperations,Lambdainvocations││└──InsightsEvents││└──Unusualactivitydetection││││TrailConfigurations:││├──Singleregionorallregions││├──Organizationtrail││├──LogtoS3and/orCloudWatchLogs││└──EncryptionwithKMS││││BestPractice:││-Enableinallregions││-LogtocentralizedS3bucket││-Enablelogfilevalidation│└─────────────────────────────────────────────────────────┘

5. AWS Config

Configurationtrackingandcompliance:Rules:├──AWSManagedRules(200+)└──CustomRules(Lambda)Examples:-s3-bucket-public-read-prohibited-encrypted-volumes-iam-password-policyConformancePacks:-Pre-builttemplates-PCIDSS,HIPAA,CIS-Custompacks

Tài liệu tham khảo chính thức

Ngày tiếp theo: EventBridge và Automation