Aws Cloudwatch

CloudWatch is the native observability layer for AWS — tightly integrated with every AWS service, with automatic metric collection from EC2, Lambda, RDS, ECS, and 200+ other services. For agents: publish custom metrics via PutMetricData, query historical metrics via GetMetricData, ingest application logs via PutLogEvents, manage alarms, and retrieve alarm states for automated remediation. Boto3 SDK handles request signing. Confidence is docs-derived.

AWS SDK (boto3): cw = boto3.client("cloudwatch"). cw.put_metric_data(Namespace="MyApp", MetricData=[{MetricName: "RequestCount", Value: 42, Unit: "Count"}]). cw.get_metric_data(MetricDataQueries=[{Id: "m1", MetricStat: {Metric: {Namespace: "MyApp", MetricName: "RequestCount"}, Period: 300, Stat: "Sum"}}], StartTime=..., EndTime=...). Logs SDK: logs = boto3.client("logs"). logs.put_log_events(logGroupName=..., logStreamName=..., logEvents=[{timestamp: ..., message: ...}]). REST API via SigV4-signed HTTPS calls.

IAM auth: AWS access keys or IAM role. Least-privilege IAM policies: cloudwatch:PutMetricData, cloudwatch:GetMetricData, logs:PutLogEvents, cloudwatch:DescribeAlarms per operation. Managed Identity for EC2/Lambda/ECS (no key management). HTTPS enforced. No OAuth2.

ThrottlingException for PutMetricData (40 TPS limit; use batch of 20 metrics per call). PutLogEvents: InvalidSequenceTokenException (use correct uploadSequenceToken). GetMetricData: DataAlreadyAcceptedException for future timestamps. Metric retention: standard resolution 15 months; high-resolution 3 hours. Log retention configurable (1 day to never). CloudWatch SLA: 99.9%.

docs.aws.amazon.com/cloudwatch provides comprehensive docs — API reference, metrics guide, logs guide, alarms, dashboards, and Container Insights. Getting started: configure AWS credentials, import boto3, first PutMetricData in under 5 minutes. All AWS services auto-publish metrics. CloudWatch Insights for log analytics. Community via AWS Forums and StackOverflow.