Security Monitoring

Languages Available: Español (Latinoamérica) | Español (España) | Français | Bahasa Indonesia | Italiano | 日本語 | 한국어 | Português (Brasil) | 中文（简体)

In this lab, you configure an Amazon Linux 2 instance to send log files to Amazon CloudWatch. You then create Amazon CloudWatch alarms and notifications to alert you to a specified number of login failures on your EC2 instances. Finally, you create a CloudWatch alarm and notification to monitor outgoing traffic through a NAT gateway.

Level

Intermediate

Duration

1 Hours 0 Minutes

Course Objectives

In this course, you will learn how to:

• Configure an Amazon Linux 2 instance to send log files to Amazon CloudWatch
• Create Amazon CloudWatch alarms and notifications to monitor for failed login attempts
• Create Amazon CloudWatch alarms to monitor network traffic through a NAT gateway

Intended Audience

This course is intended for:

• Security Engineers

Prerequisites

We recommend that attendees of this course have the following prerequisites:

• Familiar with basic navigation of the AWS Management Console 
• Comfortable running commands in a Linux command line interface (CLI)
  
  

Course Outline

• Task 1: Send local logs from an EC2 instance to Cloudwatch
• Task 2: Create a CloudWatch alarm and notification
• Task 3: Monitor a NAT gateway