SAP-C02 Question 459
Select 2A company has a multi-account AWS environment set up with AWS Organizations. They want to centralize monitoring for all accounts and ensure that critical operational metrics and logs from each account are aggregated in a central monitoring account. Which combination of steps should you take to achieve this using Amazon CloudWatch?
- A
Set up a CloudWatch cross-account data sharing role in each member account to allow the central account to receive metrics and logs.
- B
Use CloudWatch Logs subscriptions to send logs from each account to an Amazon Kinesis Data Firehose in the central account for storage and analysis.
- C
Create CloudWatch dashboards in the central account and use CloudWatch cross-account data sharing to display metrics from all member accounts.
- D
Enable CloudWatch Logs Insights in each member account and configure it for cross-account queries in the central account.
- E
Set up CloudWatch cross-account anomaly detection to automatically alert the central account of issues in the member accounts.
Show answer and explanation
Correct answers: A, C
Explanation
To centralize monitoring across multiple AWS accounts, you need to use CloudWatch cross-account data sharing to aggregate metrics and logs into a central account. This allows you to create unified dashboards and monitor operational health across accounts. CloudWatch dashboards in the central account can then display these metrics. Other options like Logs Insights and anomaly detection do not directly address the requirement of centralizing monitoring in this scenario.
- A. Correct.
Correct: CloudWatch cross-account data sharing allows you to aggregate metrics and logs from multiple accounts into a central account. This is a fundamental step to centralize monitoring.
- B. Incorrect.
Incorrect: CloudWatch Logs subscriptions are used for streaming logs to services like Kinesis Data Firehose, but this is not required for aggregating logs in a central account.
- C. Correct.
Correct: CloudWatch dashboards in the central account can display metrics from multiple accounts when cross-account data sharing is configured correctly.
- D. Incorrect.
Incorrect: CloudWatch Logs Insights is used for querying logs, but it does not support cross-account queries natively. This option is irrelevant to the scenario.
- E. Incorrect.
Incorrect: CloudWatch anomaly detection is useful for identifying unusual patterns in metrics, but it does not facilitate cross-account data sharing or centralization of monitoring.