AWS Monitoring and Logging Questions

Use of Amazon Web Services logging and monitoring capabilities to support security detection and incident investigation. Topics include capturing API audit trails with CloudTrail, threat detection with GuardDuty, network visibility using virtual private cloud flow logs, application and system logging with CloudWatch, centralized log aggregation and retention strategies, alerting pipelines, and considerations for indexing, storage cost and log parsing. Candidates should explain how these logs feed detection rules and response workflows.