intermediate~2h
CloudTrail & AWS Config
Recording every API call made in your account for audit purposes, and continuously checking whether your resources' configuration matches the rules you've defined.
1
Subtopics
🎓 Learning objectives
- •Explain what CloudTrail records and why it's essential for security investigations
- •Explain the difference between CloudTrail (what happened) and AWS Config (current/historical state and compliance)
- •Write a basic AWS Config rule that flags a non-compliant resource
- •Explain why CloudTrail logs should be sent to a separate, restricted account
CloudTrail & AWS Config is a Pro topic
Sign in, then upgrade to Pro or Power to unlock this topic and the full AWS curriculum.
📂 Subtopics
Related concepts
cloudwatch-monitoringorganizations-scpsiam-fundamentals