Enable AWS CloudTrail and Protecting CloudTrail Logs
In this lab, you will enable AWS CloudTrail and safeguard the logs that are created by the service. When you’re finished, you’ll have real world experience configuring and protecting AWS CloudTrail and its logs to help you protect your AWS accounts.
Terms and conditions apply.
Challenge
Enable CloudTrail in Your AWS Account
You’ll learn how to set up CloudTrail to monitor various events within the provided AWS account. You’ll verify the trail by performing an action against the account, and will see the event in the AWS Console.
Challenge
Edit and Monitor a CloudTrail Trail Configured to Capture S3 Data Events
You’ll learn how to edit an existing CloudTrail to monitor for data events executed against S3 buckets. You’ll verify the trail by performing an action against your account, and will see the event in the console.
Challenge
Use Server-side Encryption with AWS KMS Managed Keys
You’ll learn how to create a KMS key that you manage and use it to encrypt your CloudTrail log file. You will create a new KMS key (CMK - Customer Managed Key) with appropriate permissions for CloudTrail and apply it to your CloudTrail trail.
Challenge
Configure Object Lifecycle Management in a CloudTrail Log File S3 Bucket
You’ll learn how to configure object lifecycle management rules for your CloudTrail log file S3 bucket. You will configure specific object lifecycle management rules based on the needs of your business.
Challenge
Validate CloudTrail Log File Integrity
You’ll learn how to validate the integrity of your CloudTrail log file. You will verify that the Log File Validation setting is enabled, and make a CLI call to verify that your log file is valid.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.
Recommended prerequisites
- AWS S3 Buckets and Policies
- AWS IAM Users and Policies
- AWS KMS - CMK
- Linux command prompt
- AWS CLI