AWS has several services that provide visibility on change management, security and behavior. CloudWatch provides a monitoring system that generates service metrics via the collection of data points and the ability to create alarms and notification publishing via SNS.
CloudWatch also provides logging functionality; CloudWatch Logs manages log streams from multiple sources so system administrators can understand application behavior by collecting and analyzing application logs.