Logging and monitoring in Amazon RAM - Amazon Resource Access Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Logging and monitoring in Amazon RAM

Monitoring is an important part of maintaining the reliability, availability, and performance of Amazon RAM and your Amazon solutions. You should collect monitoring data from all parts of your Amazon solution so that you can more easily debug a multi-point failure if one occurs. Amazon provides several tools for monitoring your Amazon RAM resources and responding to potential incidents:

Amazon CloudWatch Events

Delivers a near-real-time stream of system events that describe changes in Amazon resources. CloudWatch Events enables automated event-driven computing, as you can write rules that watch for certain events and trigger automated actions in other Amazon services when these events happen. For more information, see Monitoring Amazon RAM using CloudWatch Events.

Amazon CloudTrail

Captures API calls and related events made by or on behalf of your Amazon Web Services account and delivers the log files to an Amazon S3 bucket that you specify. You can identify which users and accounts called Amazon, the source IP address from which the calls were made, and when the calls occurred. For more information, see Logging Amazon RAM API calls with Amazon CloudTrail.