2.5
CloudTrail vs CloudWatch
CloudTrail records API activity; CloudWatch monitors metrics, logs, alarms, and dashboards.
Key points
- CloudTrail → who did what (API auditing).
- CloudWatch → how is the system performing.
- AWS Config evaluates resource configuration compliance.
CloudTrail vs CloudWatch
These services are frequently confused in the exam.
CloudTrail
API activity and auditing
Example
Which user deleted an S3 bucket? CloudTrail can help answer this question.
CloudWatch
Monitoring
- CPU utilization
- Metrics
- Logs
- Alarms
- Dashboards
Memory trick
- CloudTrail → Who did what?
- CloudWatch → How is my system performing?
| Service | Primary focus |
|---|---|
| CloudTrail | API activity |
| CloudWatch | Monitoring |
| AWS Config | Resource configuration |
Exam focus
Deleting a bucket? CloudTrail. CPU at 90%? CloudWatch.