Unusual access patterns must be detected.
Separate seasonality from incidents.
Choose two designs.
Use normal periods, seasonality, time, and user groups as a baseline and measure false positives, misses, and response cost.
Detailed explanation
Normal variation is represented.
Normal variation is represented.
Operational value is known.
Operational value is known.
Distribution and seasonality differ.
Distribution and seasonality differ.
Investigation and false-positive checks are lost.
Investigation and false-positive checks are lost.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01 Domain 1.1・3.3の異常検知、ベースライン、監視を確認する。Expected result
通常の変動を基準にした異常検知と、運用コストを含む評価ができる。Key points
- Anomaly
- Seasonality
- Miss
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.