AWS CloudTrail Course: Tutorial on How to Secure your AWS Infrastructure with AWS CloudTrail

Any information that helps to secure your Cloud infrastructure is of significant use to security engineers and architects, with #AWSCloudTrail you have the ability to capture all AWS API calls made by users and/or services.

Whenever an API request is made within your environment AWS CloudTrail can track that request with a host of metadata and record it in a Log which is then sent to AWS S3 for storage allowing your to view historical data of your API calls.

Having this information has a number of uses from a #CloudSecurity and day to day operational perspective, but it also allows for additional compliance and when it comes to specific security governance controls. Having an audited trail of requests which can be tracked backed to a user or service, and even the IP address used helps to maintain your required compliance levels.

This course provides a full explanation of the service, looking at what it does, how it does it and with what components and services. It breaks down each of the configurable components allowing you to see exactly how it works and to what degree it can be configured.

This course's lectures are:

00:00 Introduction
03:57 What is AWS CloudTrail?
09:20 How does AWS CloudTrail work?
15:38 Understanding AWS CloudTrail Permissions
22:12 Understanding Trails
35:21 Insight into AWS CloudTrail Logs
52:59 Monitoring with AWS CloudTrail
1:04:29 Summary

It dives into permissions required to run and implement CloudTrail, covering roles and policies, along with an overview of S3 Bucket permissions required for log storage. There are also a number of demonstrations within the course showing first hand how to configure Trails and set up various controls and permissions giving you clear guidance on what to do.

CloudTrail Logs are examined to show you exactly how APIs are recorded and how this sensitive information can be encrypted using KMS and also shared between AWS Accounts.

A key aspect of CloudTrail is its relationship with AWS CloudWatch, where the two services can be used together to create a monitoring solution based on API requests, allowing custom metrics and thresholds to be created. When used in conjunction with SNS, this becomes a powerful monitoring solution.

Do you like content like this?

▶ Subscribe to our channel and start training now! http://clda.co/YTsubscribe

Are you preparing for the #AWSSecurity Specialty Certification?

Then look no further: we've got the right solution for you!
Our AWS Content & Security Lead, Stuart Scott, is here to get you ready to ace the exam.

Start training for FREE right here on our Youtube channel
https://clda.co/3iQ29Lr!

This course is also part of our Learning Path that will get you ready for the Security - Specialty Certification Preparation for AWS - http://clda.co/AWSSecuritySpecialtyCert.
You can find all AWS Learning Paths available on Cloud Academy here: http://clda.co/AWScerts

For more updates follow us 🖥
• LINKEDIN https://clda.co/LinkedIn
• FACEBOOK https://clda.co/Facebook
• TWITTER https://clda.co/Twitter

Видео AWS CloudTrail Course: Tutorial on How to Secure your AWS Infrastructure with AWS CloudTrail канала Cloud Academy