Book Image

Infrastructure Monitoring with Amazon CloudWatch

By : Ewere Diagboya
Book Image

Infrastructure Monitoring with Amazon CloudWatch

By: Ewere Diagboya

Overview of this book

CloudWatch is Amazon’s monitoring and observability service, designed to help those in the IT industry who are interested in optimizing resource utilization, visualizing operational health, and eventually increasing infrastructure performance. This book helps IT administrators, DevOps engineers, network engineers, and solutions architects to make optimum use of this cloud service for effective infrastructure productivity. You’ll start with a brief introduction to monitoring and Amazon CloudWatch and its core functionalities. Next, you’ll get to grips with CloudWatch features and their usability. Once the book has helped you develop your foundational knowledge of CloudWatch, you’ll be able to build your practical skills in monitoring and alerting various Amazon Web Services, such as EC2, EBS, RDS, ECS, EKS, DynamoDB, AWS Lambda, and ELB, with the help of real-world use cases. As you progress, you'll also learn how to use CloudWatch to detect anomalous behavior, set alarms, visualize logs and metrics, define automated actions, and rapidly troubleshoot issues. Finally, the book will take you through monitoring AWS billing and costs. By the end of this book, you'll be capable of making decisions that enhance your infrastructure performance and maintain it at its peak.
Table of Contents (16 chapters)
Section 1: Introduction to Monitoring and Amazon CloudWatch
Section 2: AWS Services and Amazon CloudWatch

Monitoring Amazon VPC flow logs

The previous section explained the importance of Amazon VPC as it is the underlying infrastructure that other AWS services need to run efficiently – services such as EC2, RDS, EKS, ECS, Lambda, Elastic MapReduce (EMR), Elastic Beanstalk, Batch, Elasticsearch Service, Amazon Redshift, and ElastiCache. Due to this fact, it will also be important to know how to monitor what is going in the network infrastructure that these services run on.

VPC has a feature that allows this to be possible, called flow logs. A flow log is a combination of all the traffic data going through the VPC, which is a combination of all the subnets within the VPC, be it a private or public subnet. Flow logs make it possible to know the size of the data being sent or received, whether a network request was accepted or rejected, the source and destination port of a request, the source and destination IP address of a request, the network interface ID, the subnet ID, and much...