An ops team needs one pane of glass: metrics, logs, and alarms from 50+ member accounts — without signing into each account. Which capability delivers cross-account observability?
A.Cross-account IAM roles to each account's console
50 account switches = exactly the toil to eliminate.
B.CloudWatch cross-account observability — a monitoring account viewing all source accounts
Correct. One monitoring account, all source data.
C.Consolidated billing reports
Billing reports aren't operational telemetry.
D.A shared Secrets Manager
Secrets aren't observability data.
Why this answer
CloudWatch cross-account observability designates a monitoring account that searches/logs/metrics across linked source accounts — native multi-account ops. IAM console-hopping is the friction this feature exists to remove.
Correct answer: B · Last reviewed 2026-11-04
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Complex Solution Design practice session.
Practice Complex Solution Design