EC2 metrics from several accounts in an AWS Organization must be reviewed by one operations team.
The team needs a cross-account, cross-Region view without signing in to each account.
Which design is most appropriate?
Configure CloudWatch cross-account observability and use a cross-account, cross-Region dashboard in the monitoring account.
Detailed explanation
CDN log collection does not share EC2 metrics across accounts.
CDN log collection does not share EC2 metrics across accounts.
Manual aggregation cannot provide consistent real-time monitoring or alarms.
Manual aggregation cannot provide consistent real-time monitoring or alarms.
Health checks report reachability and do not aggregate arbitrary CloudWatch metrics.
Health checks report reachability and do not aggregate arbitrary CloudWatch metrics.
The monitoring account can view metrics from linked source accounts and Regions in one dashboard.
The monitoring account can view metrics from linked source accounts and Regions in one dashboard.
Check official documentation
Compare the following points with the official documentation.
CloudWatch cross-account observability and cross-account cross-Region dashboardsの公式説明を確認する。
What to confirm
監視アカウント、ソースアカウント、共有範囲の関係を説明できる。
Key points
- Cross-account observability
- Monitoring account
- Cross-Region dashboard
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current behavior in the official SOA-C03 guide and AWS service documentation.
Foundation review
Centralized view
Sharing telemetry avoids manual exports while leaving resource ownership in the source account.
Scope
Account linkage and Region selection both affect which metrics a dashboard can display.