log groups - container for log stream log stream - log files / specific containers log expiration - infiity or choose to expire them log sources - SDK, Unified Cloudwatch agent, Cloudwatch log agent, ecs containers, lambda function logs, VPC flow logs, API gateway, cloudtrail filter based loggin, route53 dns queries