AWS CloudTrail captures a log of all API calls for an AWS account and its services. It also enables continuous monitoring and post-incident forensic investigations of AWS by providing an audit trail of all activities across your AWS infrastructure.
What’s the risk if CloudTrial is misconfigured?
If properly enabled, CloudTrail contains logs about everything that happens in an account and stores the information in dedicated S3 buckets. Completeness and integrity of this data can be critical for compliance and forensics purposes. But if left unsecured, this information could be exposed, allowing attackers to:
How does Halo Cloud Secure help?
Halo Cloud Secure provides security visibility to help ensure that AWS CloudTrail: