Monitoring to enhance security

AWS CloudTrail

  • Provides a log of all request for AWS resources in your account.
  • You can see what service was accessed, what action was performed and who made the request.
  • Captures information about every API call to every AWS resource, including sign-in events.
  • After you have enabled AWS ClodTrail event logs are delivered every five minutes.
  • Stores log in S3.
  • For additional security, when creating a trail, enable SSE-KMS encryption and log file validation.
  • It can take up to 15 minutes between the time an event occurs and when the CloudTrail creates the log file containing the event.


Continue reading “Monitoring to enhance security”