Skip to content

aws_cloudtrail_1.1.0

Compare
Choose a tag to compare
@YANG-DB YANG-DB released this 22 May 20:06
· 36 commits to main since this release
0f0e7e9

AWS CloudTrails Logs Integration

Minor fix for the Amazon Log Integration for Flint Version 1.1.0
Fix skipping index related issue
Update table creation statement according to Athena DDL Statement
See related Athena S3 setup tutorial

AWS CloudTrail Log Integration

What is AWS CloudTrail?

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure.

CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services.

CloudTrail can be used for a number of tasks, such as:

  • Simplifying compliance auditing
  • Tracking changes to AWS resources
  • Troubleshooting operational issues
  • Identifying unwanted actions or unexpected patterns in behavior

CloudTrail's event log data is delivered to an S3 bucket, and does not affect network throughput or latency. You can create or delete CloudTrail logs without any risk of impact to system performance.

See additional details here.

What is AWS CloudTrail Log Integration?

An integration is a set of pre-configured assets which are bundled together in a meaningful manner.

AWS CloudTrail log integration includes dashboards, visualizations, queries, and an index mapping.

Dashboards

The Dashboard uses the index alias logs-cloudtrail for shortening the index name - be advised.

Dashboard


Loading Integrations via DashboardManagement

To update an integration template navigate to the DashboardManagement and select savedObjects and import the new artifact:

  1. Download the amazon_cloud-trail-1.1.0.ndjson artifact

  2. Go to the DashboardManagement -> savedObjects

  1. Once there select import to load the recently downloaded integration artifact (amazon_cloud-trail-1.1.0.ndjson suffix)

  2. Open the CloudTrail integration and install