CloudTrail Quiz
You are responsible for deploying a critical application to AWS. It is required to ensure that the controls set for this application meet PCI compliance. Also, there is a need to monitor web application logs to identify any malicious activity. Which of the following services can be used to fulfill this requirement? Choose 2 answers from the options given below.
A. Amazon CloudWatch Logs
B. Amazon VPC Flow Logs
C. Amazon AWS Config
D. Amazon CloudTrail
A. & D.
AWS Documentation mentions the following about these services: AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.
For more information on CloudTrail, please refer to below URL:
https://aws.amazon.com/cloudtrail/
You can use Amazon CloudWatch Logs to monitor, store, and access your log files from Amazon Elastic Compute Cloud (Amazon EC2) instances, AWS CloudTrail, Amazon Route53, and other sources. You can then retrieve the associated log data from CloudWatch Logs.
For more information on CloudWatch logs, please refer to below URL:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.html
