SCS-C02 Question 96
Select 2An organization has built a serverless application using AWS Lambda, Amazon API Gateway, and Amazon DynamoDB. They need to monitor the application's performance and detect unusual activities, such as a sudden spike in API Gateway requests or Lambda invocation errors. Which combination of AWS services and features should they use to achieve this?
- A
Use Amazon CloudWatch metrics to monitor API Gateway request counts and Lambda invocation errors, and set up CloudWatch Alarms to send notifications.
- B
Use AWS CloudTrail to monitor DynamoDB table read and write activity in real time.
- C
Use Amazon EventBridge to detect unusual patterns in API Gateway logs and trigger automated responses.
- D
Use AWS Config to track configuration changes in the Lambda functions and DynamoDB tables.
- E
Enable Amazon CloudWatch Logs for Lambda to analyze function execution logs and set up custom metric filters for error patterns.
Show answer and explanation
Correct answers: A, E
Explanation
To monitor performance and detect unusual activity in a serverless application, combining Amazon CloudWatch metrics, alarms, and logs is the most effective approach. CloudWatch metrics provide visibility into API Gateway and Lambda activity, while CloudWatch Logs can be used to analyze execution details and define custom metric filters for specific patterns, such as errors. Other services like CloudTrail and AWS Config serve different purposes and do not directly address the real-time monitoring needs described in the scenario.
- A. Correct.
Correct. Amazon CloudWatch provides metrics for API Gateway and Lambda, and you can use CloudWatch Alarms to notify you of threshold breaches, such as a sudden spike in requests or invocation errors.
- B. Incorrect.
Incorrect. AWS CloudTrail records API calls for DynamoDB but does not provide real-time monitoring or alerting capabilities. It is more suited for auditing and troubleshooting purposes.
- C. Incorrect.
Incorrect. Amazon EventBridge can route events based on certain patterns, but it does not natively detect unusual patterns in logs, which is outside its scope in this scenario.
- D. Incorrect.
Incorrect. AWS Config is used for tracking resource configurations and compliance but is not designed for monitoring real-time performance metrics or errors.
- E. Correct.
Correct. Enabling Amazon CloudWatch Logs for Lambda provides detailed log data. Custom metric filters allow you to monitor specific error patterns and create actionable insights.