Difference between revisions of "AWS CloudTrail"

From wikieduonline
Jump to navigation Jump to search
 
(15 intermediate revisions by the same user not shown)
Line 1: Line 1:
−
[[wikipedia:AWS CloudTrail]] <ref>https://aws.amazon.com/es/about-aws/whats-new/2013/11/13/announcing-aws-cloudtrail/</ref> ([[AWS timeline|Nov 2013]]) is a web service that records [[API]] calls made on your account and delivers log files to your [[AWS S3]] bucket every 5 minutes<ref>https://aws.amazon.com/cloudtrail/faqs/#Event_payload.2C_timeliness.2C_and_delivery_frequency</ref>. Third party products such as [[CloudCheckr]] and [[Splunk]] can help you to analyze logs. Basic functionality of AWS CloudTrail is enabled on all AWS accounts by default and records up to 90 days of your account activity upon account creation.
+
[[wikipedia:AWS CloudTrail]] <ref>https://aws.amazon.com/es/about-aws/whats-new/2013/11/13/announcing-aws-cloudtrail/</ref> ([[AWS timeline|Nov 2013]]) is a web service that records [[API]] calls made on your account and delivers log files to your [[AWS S3]] bucket every 5 minutes<ref>https://aws.amazon.com/cloudtrail/faqs/#Event_payload.2C_timeliness.2C_and_delivery_frequency</ref>. Third party products such as [[CloudCheckr]] and [[Splunk]] can help you to analyze logs. Basic functionality of AWS CloudTrail is enabled on all AWS accounts by default and records up to 90 days of your account activity upon account creation by creating a trail you can extend [[retention period]].
  
 
* Homepage: https://aws.amazon.com/cloudtrail/
 
* Homepage: https://aws.amazon.com/cloudtrail/
  
 +
Features:
 +
* Basic funtionality enabled by default
 +
* you can create a trail that will log events for all AWS accounts in the [[AWS organization]]
 +
* Encrypted by default Amazon server-side encryption with [[Amazon S3-managed encryption keys]] ([[SSE-S3]])
 +
* Ingest events from a partner or external source
 +
 +
Services:
 
* [[AWS CloudTrail Insights]] ([[AWS timeline|Nov 2019]]) <ref>https://aws.amazon.com/blogs/aws/announcing-cloudtrail-insights-identify-and-respond-to-unusual-api-activity/</ref>
 
* [[AWS CloudTrail Insights]] ([[AWS timeline|Nov 2019]]) <ref>https://aws.amazon.com/blogs/aws/announcing-cloudtrail-insights-identify-and-respond-to-unusual-api-activity/</ref>
 
* [[AWS CloudTrail Lake]] ([[AWS timeline|Jan 2022]]) <ref>https://aws.amazon.com/blogs/mt/announcing-aws-cloudtrail-lake-a-managed-audit-and-security-lake/</ref>
 
* [[AWS CloudTrail Lake]] ([[AWS timeline|Jan 2022]]) <ref>https://aws.amazon.com/blogs/mt/announcing-aws-cloudtrail-lake-a-managed-audit-and-security-lake/</ref>
 +
* [[AWS CloudTrail Lake Dashboards]] ([[AWS timeline|Jun 2023]]) <ref>https://aws.amazon.com/blogs/mt/announcing-aws-cloudtrail-lake-dashboards-visualize-and-analyze-cloudtrail-data/</ref>
 +
 +
  
 
* [[Data exfiltration]]
 
* [[Data exfiltration]]
Line 18: Line 28:
  
 
== Activities ==
 
== Activities ==
 +
* [[Creating a trail for an organization with the AWS CLI]]: <code>[[aws organizations enable-aws-service-access]] --service-principal [[cloudtrail.amazonaws.com]]</code>
 
* Read https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-receive-logs-from-multiple-accounts.html
 
* Read https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-receive-logs-from-multiple-accounts.html
−
* Read [[best practices]]: https://aws.amazon.com/blogs/mt/aws-cloudtrail-best-practices/
+
* Read [[AWS CloudTrail Best Practices]]: https://aws.amazon.com/blogs/mt/aws-cloudtrail-best-practices/
 
* Read blog: https://aws.amazon.com/blogs/mt/category/management-tools/aws-cloudtrail/
 
* Read blog: https://aws.amazon.com/blogs/mt/category/management-tools/aws-cloudtrail/
 +
* [[Validating CloudTrail log file integrity]]
  
 
== Related terms ==
 
== Related terms ==
Line 33: Line 45:
 
* [[CloudTrail Events]]
 
* [[CloudTrail Events]]
 
* [[GetSecretValue]]
 
* [[GetSecretValue]]
 +
* [[AWS security]]
 +
* [[AWS compliance]]
 +
* [[AWS Governance]]
 +
* [[AWS Audit Manager]]
 +
* [[aWSCloudTrail_FullAccess]]
  
 
== See also ==
 
== See also ==
 
* {{aws cloudtrail}}
 
* {{aws cloudtrail}}
 
* {{CloudTrail}}
 
* {{CloudTrail}}
−
* {{AWS security}}
+
 
−
* {{AWS compliance}}
 
−
* {{AWS Governance}}
 
  
 
[[Category:AWS security]]
 
[[Category:AWS security]]
 
[[Category:Cloud]]
 
[[Category:Cloud]]
 
[[Category:AWS]]
 
[[Category:AWS]]

Latest revision as of 05:21, 11 July 2024

wikipedia:AWS CloudTrail [1] (Nov 2013) is a web service that records API calls made on your account and delivers log files to your AWS S3 bucket every 5 minutes[2]. Third party products such as CloudCheckr and Splunk can help you to analyze logs. Basic functionality of AWS CloudTrail is enabled on all AWS accounts by default and records up to 90 days of your account activity upon account creation by creating a trail you can extend retention period.

Features:

Services:


Pricing[edit]

Change log[edit]

Activities[edit]

Related terms[edit]

See also[edit]

  • ↑ https://aws.amazon.com/es/about-aws/whats-new/2013/11/13/announcing-aws-cloudtrail/
  • ↑ https://aws.amazon.com/cloudtrail/faqs/#Event_payload.2C_timeliness.2C_and_delivery_frequency
  • ↑ https://aws.amazon.com/blogs/aws/announcing-cloudtrail-insights-identify-and-respond-to-unusual-api-activity/
  • ↑ https://aws.amazon.com/blogs/mt/announcing-aws-cloudtrail-lake-a-managed-audit-and-security-lake/
  • ↑ https://aws.amazon.com/blogs/mt/announcing-aws-cloudtrail-lake-dashboards-visualize-and-analyze-cloudtrail-data/
  • ↑ https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/BidEvictedEvent.html
    • Retrieved from "https://www.wikieduonline.com/index.php?title=AWS_CloudTrail&oldid=334096"

    Advertising: