Senior Cloud Delivery Architect at a computer software company with 201-500 employees
MSP
Top 10
Mar 25, 2024
In one specific scenario, we encountered a situation where a terminated employee still had access to our environment without our knowledge. With AWS CloudTrail, we could track and monitor the employees' activities, revealing that they were downloading specific files from our customer's environment. Without it enabled, we wouldn't have been aware of this.
Principal Solution Architect at StarOne IT Solutions
MSP
Feb 15, 2024
AWS CloudTrail helps in accelerating incident investigation and response. It increases it because I pull out the logs to CloudTrail, and from CloudTrail watch, I'll send it to the Security Hub and do a visualization with Prometheus and Grafana.
AWS CloudTrail offers comprehensive monitoring of AWS environments, enabling detailed tracking and auditing of API calls, changes, and account activities, promoting enhanced security and compliance.AWS CloudTrail integrates seamlessly with other AWS services to monitor API calls and provide robust logging functionality. It enhances security by logging unauthorized access and scales for comprehensive monitoring across services. CloudTrail also aids compliance by retaining logs, supports...
In one specific scenario, we encountered a situation where a terminated employee still had access to our environment without our knowledge. With AWS CloudTrail, we could track and monitor the employees' activities, revealing that they were downloading specific files from our customer's environment. Without it enabled, we wouldn't have been aware of this.
AWS CloudTrail helps in accelerating incident investigation and response. It increases it because I pull out the logs to CloudTrail, and from CloudTrail watch, I'll send it to the Security Hub and do a visualization with Prometheus and Grafana.
It is a stable solution. AWS handles it well.
The product’s most valuable feature is monitoring. It helps us audit the changes in AWS account at the application and resource level.
The solution is good as a central logging platform for showing all cloud events.