AWS Administration - The Definitive Guide - Second Edition

Creating custom metric filters and alarms for monitoring CloudTrail Logs

With the Log Group created and integrated with the CloudTrail Trail, we can now continue to create and assign custom metric filters as well as alarms. These alarms can be leveraged to trigger notifications whenever a particular compliance or governance issue is identified by CloudTrail.

To begin with, let's first create a custom metric filter using CloudWatch Logs. In this case, we will be creating a simple filter that triggers a CloudWatch alarm each time an S3 bucket API call is made. This API call can be either a simple PUT or DELETE operation on the bucket's policies, life cycle, and so on:

1. Log in to your Amazon CloudWatch dashboard or, alternatively, select the ...