Audit

• EKS control plane logging

aws eks describe-cluster --name your_cluster_name

        "logging": {
            "clusterLogging": [
                {
                    "types": [
                        "api",
                        "audit",
                        "authenticator",
                        "controllerManager",
                        "scheduler"
                    ],
                    "enabled": false
                }
            ]
        },

Related

• /var/log/audit/audit.log
• Vulnerability Assessment and Penetration Testing (VAPT)
• Infrastructure Security Audits

See also

• Audit: acct, atop, tripwire, AIDE, auditd, debsums, AWS Cloudtrail, logwatch, logcheck, Google Santa, Coguard