Unusual access patterns must be detected.
Separate seasonality from incidents.
Choose two designs.
Use normal periods, seasonality, time, and user groups as a baseline and measure false positives, misses, and response cost.
Detailed explanation
Normal variation is represented.
Distribution and seasonality differ.
Investigation and false-positive checks are lost.
Operational value is known.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 1.1・3.3の異常検知、ベースライン、監視を確認する。
Official references
What to confirm
通常の変動を基準にした異常検知と、運用コストを含む評価ができる。
Key points
- Anomaly
- Seasonality
- Miss
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Anomaly detection
Identifying observations or behavior that depart from expected patterns.
Baseline
A reference description of normal values and variation.