Batch 9: Obsidian插件/AI开源平替/Coze培训/TK面单/Ubuntu科学上网

- Sources: 5个新文档
- Concepts: ProxyChains, SOCKS5代理, Docker Daemon代理
- Index: 更新至 Batch 9
- 累计 sources: 108/182

wiki/sources/AWS-CloudFormation-StackSets-多账户集中日志监控.md

@@ -0,0 +1,49 @@
+---
+title: "AWS CloudFormation StackSets 多账户集中日志监控"
+type: source
+tags: [aws, devops, iac, cloudwatch, eventbridge]
+date: 2025-10-25
+---
+
+## Source File
+- [[raw/Cloud & DevOps/How to Simplify Multi-Account Deployments Monitoring Centralized Logs for AWS CloudFormation StackSets.md]]
+
+## Summary
+- 核心主题：AWS 多账户环境下 CloudFormation StackSets 部署的集中日志监控方案
+- 问题域：多账户 IaC 部署时，逐账户登录排查故障的运维负担
+- 方法/机制：EventBridge 跨账户事件转发 + CloudWatch Logs 集中存储 + CloudWatch Logs Insights 查询
+- 结论/价值：一个管理账户统一视图，覆盖全部成员账户的 StackSets 事件，缩短故障定位时间
+
+## Key Claims
+- AWS Organizations 多账户结构下，StackSets 可跨账户部署基础设施，但缺乏集中监控
+- EventBridge 规则在每个成员账户捕获 CloudFormation 事件并转发至管理账户自定义事件总线
+- CloudWatch Logs Insights 支持跨账户查询，提供失败堆栈操作、账户分布、资源类型等结构化分析
+- 两张 CloudFormation 模板（log-setup-management.yaml + common-resources-stackset.yaml）实现全自动化部署
+
+## Key Quotes
+> "When a critical security baseline deployed across 50 accounts suddenly starts failing, teams face the daunting task of logging into each account individually to understand what went wrong." — AWS DevOps Blog，描述多账户运维的核心痛点
+
+## Key Concepts
+- [[CloudFormation StackSets]]：跨 AWS 账户和区域部署 IaC 的托管服务
+- [[EventBridge]]：AWS 事件总线，支持跨账户事件路由
+- [[CloudWatch Logs]]：AWS 日志存储与查询服务
+- [[CloudWatch Logs Insights]]：结构化日志分析查询语言
+- [[AWS Organizations]]：AWS 多账户组织管理框架
+- [[IaC]]：Infrastructure as Code，基础设施即代码
+
+## Key Entities
+- [[AWS]]：云服务商，StackSets/EventBridge/CloudWatch 服务的提供方
+
+## Connections
+- [[AWS]] ← 提供基础设施 ← [[CloudFormation StackSets]]
+- [[CloudFormation StackSets]] ← 事件来源 ← [[EventBridge]]
+- [[EventBridge]] ← 跨账户转发 ← [[CloudWatch Logs]]
+- [[CloudWatch Logs]] ← 查询分析 ← [[CloudWatch Logs Insights]]
+
+## Contradictions
+- 无
+
+## Metadata
+- 来源：AWS DevOps & Developer Productivity Blog
+- URL：https://aws.amazon.com/blogs/devops/how-to-simplify-multi-account-deployments-monitoring-centralized-logs-for-aws-cloudformation-stacksets/
+- 模板：log-setup-management.yaml + common-resources-stackset.yaml（GitHub aws-cloudformation-templates 仓库）