Difference between revisions of "AWS CloudTrail Best Practices"
Jump to navigation
Jump to search
| Line 6: | Line 6: | ||
* [[Enable MFA-delete and versioning on the Amazon S3 Bucket storing log files]]: <code>[[aws_s3_versioning]], [[mfa_delete]]</code> | * [[Enable MFA-delete and versioning on the Amazon S3 Bucket storing log files]]: <code>[[aws_s3_versioning]], [[mfa_delete]]</code> | ||
* [[Use advanced event selectors with data events]]: <code>[[DeleteObject]]</code> | * [[Use advanced event selectors with data events]]: <code>[[DeleteObject]]</code> | ||
| + | * [[Integrate CloudTrail with Amazon CloudWatch Logs]] | ||
== Related == | == Related == | ||
Revision as of 04:55, 11 July 2024
- Enable CloudTrail log file integrity validation:
--enable-log-file-validation - Receiving CloudTrail log files from multiple accounts
- Enable MFA-delete and versioning on the Amazon S3 Bucket storing log files:
aws_s3_versioning, mfa_delete - Use advanced event selectors with data events:
DeleteObject - Integrate CloudTrail with Amazon CloudWatch Logs
Related
- AWS CloudTrail Events
- AWS Best Practices
- Data events
--is-multi-region-trail--enable-log-file-validation
See also
Advertising:
