In this chapter we learned about some of the monitoring and alerting capabilities of AWS with respect to managed services. Custom alarms and filters were demonstrated with the use of CloudWatch to implement an intrusion system using log analysis. We installed the CloudWatch agent for EC2 instances to stream logs directly to CloudWatch Logs.