Question

A company runs workloads across 12 member AWS accounts in AWS Organizations. The central operations team needs to view CloudWatch metrics, logs, and traces from all member accounts in a single monitoring account without copying data or building custom aggregation scripts. What is the MOST operationally efficient way to achieve this?

Accepted Answer

Configure CloudWatch cross-account observability by linking the member (source) accounts to a designated monitoring account.

Answer

Create a CloudWatch Logs subscription filter in each member account that streams all metrics to the monitoring account via Kinesis Data Firehose.

Answer

Build a CloudWatch dashboard in the monitoring account and add each member account's metrics using cross-account IAM roles assumed manually per widget.

Answer

Enable AWS Config aggregators in the monitoring account to collect CloudWatch metrics and logs from all member accounts.