How should security logging and threat detection be designed for production in Cloud Security?

Centralize important logs, define detections for high-risk behavior, protect log integrity, tune alerts, and connect them to incident response.