AWS CloudTrail Reviews

I have worked in different phases and parts. I have been the consumer myself, a service provider, a consultant, and a trainer for CloudTrail.

The management events and CloudTrail Insights are valuable. The management events are useful for monitoring the compliance and standards when creating any service like an EC2 instance or S3 bucket. CloudTrail Insights provides an analysis of all events and actions taken.

Some use cases with AWS CloudTrail include monitoring services running within your AWS environment, ensuring they function as expected. With AWS CloudTrail enabled, you can track who is logging in and out, access logs, and perform accounting and auditing of services and networks to monitor user activity and access to information.

In one specific scenario, we encountered a situation where a terminated employee still had access to our environment without our knowledge. With AWS CloudTrail, we could track and monitor the employees' activities, revealing that they were downloading specific files from our customer's environment. Without it enabled, we wouldn't have been aware of this.

We can use it to trigger Lambda functions for authorization and terminate unauthorized access. Integrating it with Amazon Simple Notification Service also allows us to receive alerts when specific metrics are reached, helping us take prompt action when needed.

For example, if a server exceeds its limit, we get notifications. This helps us act fast, like adding more servers or adjusting resources. Also, if someone unauthorized tries to access it, we get alerts. For example, we know immediately if a terminated employee tries to get in.

I use AWS CloudTrail to monitor the API calls to the service and to see who has been connected. Whenever somebody logs in, I utilize CloudTrail to ensure that I receive notifications through SNS for our notification service.

AWS CloudTrail has significantly improved the monitoring of API calls within our network, allowing us to keep track of logins and access to our services. It is a straightforward solution from AWS that helps integrate well with any service we choose, thereby improving our workflow.

AWS CloudTrail is a service provider that enables complaints, operation auditing, and risk auditing for AWS accounts. CloudTrail logs API all across our AWS resources and maintains an event history for AWS accounts. The solution integrates with Amazon S3 buckets, and the logs are stored in the S3 buckets of our choice.

AWS CloudTrail integrates with AWS Config and provides custom event, security, and compliance auditing.

Our company uses the solution to monitor cloud services. All cloud activities are stored in the solution. 

We check the solution's logs and compare them to CloudWatch. 

The solution is good as a central logging platform for showing all cloud events. For example, it records new users and their activities or events. When you open the solution, you get good details about what has been going on for the entire day. 

The auditing and compliance points of view are good. 

We use AWS CloudTrail as a complete data centre. It is working on a cloud. We have different operating systems. We have completely deployed in the cloud.

There are requirement variations depending on the organisation and their specific needs. There are fundamental concepts related to deployment, AWS, and computing that must be understood. Support is available based on the individual's knowledge of computing and their ability to handle cloud technologies.

CloudTrail is available 24/7. There is no downtime and administration is very simple. The single window console has so many features.

I use AWS CloudTrail to gather audit logs to determine who, what, where, when, how, and why actions took place within the cloud environment.

I have a use case where I determined that system failures or API failures happen with specific IM roles, and I saw that within the log data, so I reached out to the team responsible for that role and allowed the team to remediate that. AWS CloudTrail has been beneficial as it provided better reliability within the service. It was a blocker, which the team wasn't particularly aware of until I raised it.