Monitoring and Optimization

CloudWatch is a monitoring and observability service for AWS resources and applications. It collects metrics (CPU usage, network traffic), logs, and events. You can set alarms to trigger actions like Auto Scaling or SNS notifications when thresholds are crossed. CloudWatch Dashboards provide a unified view of your resources' health and performance.

CloudTrail records all API calls made in your AWS account — who did what, when, and from where. It's essential for governance, compliance, and security auditing. Every action in the console, CLI, or SDK is logged. You can detect unusual activity, troubleshoot operational issues, and prove compliance with regulations by analyzing CloudTrail logs.

AWS Artifact is a self-service portal for on-demand access to AWS compliance reports and agreements. It provides documents like SOC reports, PCI DSS attestation, ISO certifications, and HIPAA BAAs. These help you demonstrate compliance to auditors and regulators. Artifact is free and available directly from the AWS Management Console.