Basic information
| Field | Details |
|---|---|
| English / full name | AWS Monitoring and Governance Interview Guide |
| Chinese | AWS 监控与治理面试 |
| Japanese | AWS 監視・ガバナンス面接ガイド |
| Review priority | 面试专题 |
| Often confused with | CloudWatch / CloudTrail / Config / EventBridge |
In one sentence
Answer monitoring and governance questions through the goal, data source, service responsibilities, permissions and retention, alerts, and automation.
Core summary
CloudWatch shows runtime behavior, CloudTrail shows API activity, Config shows configuration and compliance, and EventBridge routes events to actions.
Study points
- For a deleted resource, use CloudTrail to identify the principal, time, and API.
- For open SSH, use a Config rule and Automation, with CloudTrail for action evidence.
- Organizations supplies accounts, OUs, and SCPs; Control Tower adds a landing zone and controls.
- Artifact provides AWS compliance reports; Audit Manager collects evidence from the customer environment.
Common pitfalls
- An SCP sets a permission ceiling and does not grant access by itself.
- Configuration facts, action evidence, and runtime metrics come from different services.
Key memory
State the monitoring goal, then cover data, permissions, alerts, remediation, and validation.