AWS CloudWatch

本文缩写（英文全称与中文含义）

缩写	英文全称／名称	中文含义
CLI	Command-Line Interface	命令行接口
ECS	Elastic Container Service	AWS 容器编排服务
IAM	Identity and Access Management	身份与访问管理
NAT	Network Address Translation	网络地址转换
SLO	Service Level Objective	服务等级目标
SNS	Simple Notification Service	AWS 消息通知服务
VPC	Virtual Private Cloud	虚拟私有云网络

Links#

https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/WhatIsCloudWatch.html
https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.html
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Install-CloudWatch-Agent.html
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_awslogs.html
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_firelens.html

1. Important Points#

CloudWatch 覆盖面很大:
    Metrics
    Logs
    Alarms
    Dashboards
    Container Insights
    CloudWatch Agent
    Logs subscription
    Metric Streams

文档拆分原则:
    _index.md:
        mental model / service map / best practices

    subtopic page:
        practical workflow
        IAM sample
        config sample
        minimal code demo
        verify / troubleshooting

2. Common Pages#

Page	Goal
`Alarms.md`	CloudWatch Alarm naming, SNS/Lambda notification router, metric math examples
`AlarmStatistics.md`	CloudWatch Alarm statistic / extended statistic selection and CLI examples
`ECSLogsToVictoriaLogs.md`	ECS logs to self-hosted VictoriaLogs

3. Production Checklist#

logs:
    retention defined
    sensitive fields filtered
    delivery failure monitored
    cost monitored

metrics:
    service SLO metrics identified
    alarms reviewed
    dashboard exists

operations:
    log ingestion runbook exists
    IAM least privilege
    VPC endpoint / NAT path reviewed