Cloud Security · 5 min
Cloud Logging & Monitoring
Seeing what happened — if you turned it on
This lesson explains the concept, then checks your understanding in a short interactive exercise.
Four log families
Cloud telemetry comes from distinct sources that answer distinct questions.
- Control-plane / audit logs — who created, changed or deleted a resource
- Authentication logs — sign-ins, MFA results, token issuance
- Resource / activity logs — what a specific service did
- Workload and network logs — OS, application and traffic flow records
Making logs usable
Collection alone is not monitoring. Logs need to reach one place, stay long enough to matter, and generate signals someone actually reviews.
- Centralize across accounts, subscriptions and projects
- Set retention against your investigation and obligation needs
- Alert on meaningful events, not on everything
- Correlate identity, resource and network views of the same event
Loading the interactive lesson…