AWS - Cloudtrail: Revision history

From Cramsession
Jump to navigationJump to search
✍️ Verified Author: MflavellClick to view professional profile & credentials

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

9 February 2026

  • curprev 16:0416:04, 9 February 2026Mflavell talk contribs 557 bytes +557 Created page with " Cloudtrail should be configured to capture every API call. Coundtrail may be the first target of a bad actor: ** Disablining cloud trail is often a top prioirty of bad actors to "cover their trcks" ** The best way to prevent manimulation of log files is through the use of an SCP - Service control policy. *** The SCP can be pushed down from the top if multiple accounts are involced. Another method is to stop the ability to turn off cloudtrail: ** This is done by c..."