AWS Certified DevOps Engineer – ProfessionalMonitoring and LoggingEasy

A DevOps team manages a critical application running on Amazon EC2 instances. They need to collect detailed system-level metrics, such as memory utilization and disk I/O, that are not available by default in Amazon CloudWatch. The solution must be cost-effective and integrate seamlessly with existing CloudWatch dashboards and alarms. Which AWS service or tool should the team use to meet these requirements?

  1. AAWS Config
  2. BCloudWatch Agent
  3. CAWS CloudTrail
  4. DAmazon Inspector
Show answer & explanation

Correct answer: B. CloudWatch Agent

The CloudWatch Agent is specifically designed to collect additional system-level metrics and logs from EC2 instances (and on-premises servers) which are not natively provided by CloudWatch. It integrates directly with CloudWatch, allowing for custom dashboards and alarms based on these collected metrics. This meets the requirements for detailed metrics, cost-effectiveness, and integration.

Why the other options are wrong

  • A. AWS Config provides a detailed view of the configuration of AWS resources, not real-time system-level metrics.
  • C. AWS CloudTrail records API calls and related events, not detailed system-level metrics like memory utilization.
  • D. Amazon Inspector is a security assessment service that helps improve the security and compliance of applications deployed on AWS, not a metric collection tool.

CloudWatch Agent

A unified agent for collecting metrics and logs from Amazon EC2 instances and on-premises servers, sending them to CloudWatch.

  • Collects custom metrics (e.g., memory, disk I/O) and logs.
  • Supports both EC2 and on-premises environments.
  • Unified agent for logs and metrics.

Memory trick: CloudWatch Agent: Your EC2's Metric & Log Collector.

More Monitoring and Logging questions