Author: miro

AWS CloudTrail

• Provides a log of all request for AWS resources in your account.
• You can see what service was accessed, what action was performed and who made the request.
• Captures information about every API call to every AWS resource, including sign-in events.
• After you have enabled AWS ClodTrail event logs are delivered every five minutes.
• Stores log in S3.
• For additional security, when creating a trail, enable SSE-KMS encryption and log file validation.
• It can take up to 15 minutes between the time an event occurs and when the CloudTrail creates the log file containing the event.

 

Continue reading “Monitoring to enhance security”