Frequently asked questions

Can I use my current monitoring service?

Amazon CloudWatch is a monitoring and observability service built for DevOps engineers, developers, site reliability engineers (SREs), IT managers, and application owners. It provides data and actionable insights to help you monitor your applications, respond to system-wide performance changes, and optimize resource utilization. However, if you have an established monitoring service in place, you do not need to replace it.

How do I stop the log files from being tampered with?

You can enable log file integrity validation. It is good practice to manage and store your logs in a dedicated AWS account and restrict access to that account. For more information, see Using CloudTrail in this guide.

Do I have to maintain separate log files for each application?

No, you can consolidate the log data from multiple applications into the same log file. However, make sure that a unique identifier for each application is recorded in the log stream.