CloudWatch (overall monitoring)

  • Performance monitoring (metrics, CPU, network, etc…) & dashboard
  • Events & Alerting
  • Log Aggregation & Analysis

CloudTrail (API history tracking - who and when)

  • Record API calls made within your Account by everyone
  • Can define trails for specific resources
  • Global Service

Config (compliance audit)

  • Record configuration changes
  • Evaluate resources against compliance rules
  • Get timeline of changes and compliance