Skip to content

README.md

Latest commit

 

History

History
56 lines (37 loc) · 1.64 KB

README.md

File metadata and controls

56 lines (37 loc) · 1.64 KB

CloudTrail: Enable logging and look up events

Create a CloudTrail trail that logs API activity to an S3 bucket, look up recent events, and clean up.

Source

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-tutorial.html

Use case

  • ID: cloudtrail/getting-started
  • Phase: create
  • Complexity: beginner
  • Core actions: cloudtrail:CreateTrail, cloudtrail:StartLogging, cloudtrail:LookupEvents

What it does

  1. Creates an S3 bucket for trail logs
  2. Sets the bucket policy to allow CloudTrail writes
  3. Creates a trail pointing to the bucket
  4. Starts logging
  5. Looks up recent API events
  6. Describes the trail configuration

Running

bash aws-cloudtrail-gs.sh

To auto-run with cleanup:

echo 'y' | bash aws-cloudtrail-gs.sh

Resources created

  • CloudTrail trail
  • S3 bucket (with CloudTrail bucket policy)

Estimated time

  • Run: ~10 seconds

Cost

S3 storage only. CloudTrail delivers management event logs to S3 at no charge for the first trail. S3 storage costs apply for the log files.

Related docs