SAP-C02 Question 385
Select 2Your organization runs a distributed application across multiple AWS accounts and regions. You need a centralized solution to monitor the application's performance and consolidate logs from all accounts and regions for analysis. Additionally, you want to set up alerts to detect anomalies in real time. Which combination of solutions should you implement to achieve this?
- A
Set up Amazon CloudWatch Cross-Account Observability and use CloudWatch Logs Insights to query logs across accounts and regions.
- B
Enable AWS CloudTrail in all accounts and regions, and use the default CloudTrail logs for monitoring application performance.
- C
Use AWS Organizations to centralize CloudWatch dashboards and CloudWatch Alarms across accounts.
- D
Configure CloudWatch Logs subscription filters to send logs to a central Amazon S3 bucket for analysis.
- E
Leverage Amazon CloudWatch Contributor Insights to detect anomalies and identify traffic patterns.
Show answer and explanation
Correct answers: A, E
Explanation
To monitor and analyze a distributed application across multiple AWS accounts and regions, you need a centralized logging and monitoring setup. CloudWatch Cross-Account Observability allows you to consolidate logs and metrics from multiple accounts and regions effectively, while CloudWatch Logs Insights provides advanced log querying capabilities. Additionally, Contributor Insights helps detect anomalies and patterns in logs, making it suitable for real-time monitoring and alerting in distributed architectures.
- A. Correct.
Correct. Amazon CloudWatch Cross-Account Observability allows you to monitor resources across multiple AWS accounts and regions. CloudWatch Logs Insights provides an interactive query capability for analyzing logs.
- B. Incorrect.
Incorrect. While AWS CloudTrail logs all API calls made within AWS, it is not designed to monitor application performance or detect anomalies in real-time.
- C. Incorrect.
Incorrect. AWS Organizations helps with account management but does not directly centralize CloudWatch dashboards or alarms. These need to be set up per account or region manually, unless additional configurations are made.
- D. Incorrect.
Incorrect. Sending logs to an S3 bucket might help with long-term storage but does not directly support real-time monitoring or performance tracking.
- E. Correct.
Correct. Amazon CloudWatch Contributor Insights can analyze log data and identify anomalies, providing insights into key contributors to traffic patterns and system performance.