Security World 5 · Eyes Everywhere · Stage 5

Threshold Alarm

An alarm is arithmetic: events per period against a threshold, M datapoints of N, and what to do when a period is empty.

  • Metric filters
  • M of N alarms
  • Composite alarms
  • Missing data
  • Route 53 health checks
  • State Manager
Domain
Security
World
Security World 5: Eyes Everywhere (Specialty)
Game type
Alarm clock: Tune metric filters and alarms, then play the day to see who gets paged.
Time
About 35 minutes on a first attempt (estimated)
Exam guides
  • SAA-C03Task 1.2: Design secure workloads and applications
  • SOA-C03Skill 1.1.3: Configure, identify, and troubleshoot CloudWatch alarms that can invoke AWS services directly or through Amazon EventBridge (for example, by creating composite alarms and identifying their invokable actions)
  • DOP-C02Task 4.2: Audit, monitor, and analyze logs and metrics to detect issues
  • SCS-C03Skill 1.1.1: Analyze workloads to determine monitoring requirements; Skill 1.1.2: Design and implement workload monitoring strategies (for example, by configuring resource health checks); Skill 1.1.4: Create metrics, alerts, and dashboards to detect anomalous data and events (for example, Amazon GuardDuty, Amazon Security Lake, AWS Security Hub, Amazon Macie); Skill 1.1.5: Create and manage automations to perform regular assessments and investigations (for example, by deploying AWS Config conformance packs, Security Hub, AWS Systems Manager State Manager)