Designing and Implementing a Comprehensive Cloud Security Monitoring Tool with CloudWatch Logs and CloudWatch Console

Patil, Pranav Rajendra (2024) Designing and Implementing a Comprehensive Cloud Security Monitoring Tool with CloudWatch Logs and CloudWatch Console. Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (1MB) | Preview
Preview	PDF (Configuration Manual) Download (1MB) | Preview

Abstract

The reliability, performance, and safety of cloud-based systems can be ensured through cloud security monitoring. This research discusses the design and implementation of a comprehensive cloud security monitoring tool based on AWS-native services, particularly CloudWatch Logs and CloudWatch Console. Motivation for this work came from the need for real-time monitoring solutions that are designed to seamlessly integrate with cloud environments in order to offer efficient log collection, performance tracking, and troubleshooting capabilities. The project included provisioning an Amazon EC2 instance, configuring it with the CloudWatch Agent to collect both system logs and metrics. A CloudWatch log group monitorloggroupec22024 had the logs streamed from critical system activities such as initialization and resource usage. CloudWatch Metrics monitors CPU, memory, and disk utilization in real time. These logs and metrics would primarily be visualized from a central place, the CloudWatch Console, instead of using some third-party tools like Elasticsearch or Kibana. During implementing the solution, there have been a few permission errors caused by IAM roles and configuration validation errors. Those issues were iteratively debugged and solved with the policy change. The final system would create a seamless pipeline of log collection, processing, and visualization, thus proving that the AWS-native tools could be used effectively in security monitoring. This research emphasizes the ease, cost-effectiveness, and scalability of using CloudWatch for comprehensive monitoring solutions in cloud environments. It concludes by suggesting potential future enhancements, including automated alerting and advanced integrations with third-party tools for further analysis. This work focuses much on the practicality of monitoring for modern IT infrastructure.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Arun, Shreyas Setlur UNSPECIFIED
Subjects:	Q Science > QA Mathematics > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Cloud computing Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security
Divisions:	School of Computing > Master of Science in Cloud Computing
Depositing User:	Ciara O'Brien
Date Deposited:	16 Jul 2025 10:28
Last Modified:	16 Jul 2025 10:28
URI:	https://norma.ncirl.ie/id/eprint/8138

Actions (login required)

View Item