Amazon logging and monitoring tools
This section provides an overview of the tools available for logging and monitoring in Amazon Network Firewall for standard Amazon security purposes. For more information about logging and monitoring in Network Firewall see Logging and monitoring in Amazon Network Firewall.
Monitoring is an important part of maintaining the reliability, availability, and performance of Network Firewall and your Amazon solutions. You should collect monitoring data from all parts of your Amazon solution so that you can more easily debug a multi-point failure if one occurs. Amazon provides several tools for monitoring your Network Firewall resources and responding to potential incidents:
- Amazon CloudWatch Alarms
Using CloudWatch alarms, you watch a single metric over a time period that you specify. If the metric exceeds a given threshold, CloudWatch sends a notification to an Amazon SNS topic or Amazon Auto Scaling policy. For more information, see Amazon Network Firewall metrics in Amazon CloudWatch.
- Amazon CloudTrail Logs
CloudTrail provides a record of actions taken by a user, role, or an Amazon service in Network Firewall. Using the information collected by CloudTrail, you can determine the request that was made to Network Firewall, the IP address from which the request was made, who made the request, when it was made, and additional details. For more information, see Logging calls to the Amazon Network Firewall API with Amazon CloudTrail.
- Amazon Trusted Advisor
Trusted Advisor draws upon best practices learned from serving hundreds of thousands of Amazon customers. Trusted Advisor inspects your Amazon environment and then makes recommendations when opportunities exist to save money, improve system availability and performance, or help close security gaps. All Amazon customers have access to five Trusted Advisor checks. Customers with a Business or Enterprise support plan can view all Trusted Advisor checks. For more information, see Amazon Trusted Advisor.