Upcoming Features
No Items in Stack
Browse
Browse

Security Control

Config Rules
Auto Remediation
Amazon GuardDuty
Amazon Inspector
Security Hub
Amazon Macie
Billing and Cost
S3 Bucket Policies
CloudWatch Alarms & Rules
Logging & Monitoring
Service Control Policies
AWS Systems Manager
Security Groups & NACLs
KMS
IAM Policies

Configuration Packages

Custom VPC Template
Enable Logging Services
Threat Detection
Monitoring & Compliance
Auto Remediation Rules
EC2 Patch Management
Common SCPs Package
PCI DSS Compliance
CIS AWS Benchmark

Service

VPC
S3
EC2
IAM
CloudFormation
Lambda
EMR
DynamoDB
RDS

Security Strategy Guides

EC2 Security Strategy
S3 Security Strategy
Logging & Monitoring Strategy

Solutions, Guides & Tools

Security Solutions
Security Tools
Close

Logging & Monitoring Configurations

Native AWS logging configurations and services that you can leverage to provide greater visibility near to real time for occurrences in the AWS environment. Currently this includes AWS CloudTrail and AWS Config.

ConfigurationSolutions & Tools
7/7
FILTERS
 
Service Protected
Configuration PackageAWSVPC
Configuration Package
AWS Logging Services Configuration Package
AWS Logging Services
A configuration package to enable AWS security logging and activity monitoring services: AWS CloudTrail, AWS Config, and Amazon GuardDuty. The package also includes an S3 bucket to store CloudTrail and Config history logs, as well as an optional CloudWatch log group to receive CloudTrail logs.
AWS
AWS CloudTrail
AWS Services
Configuration to enable AWS CloudTrail in an AWS account with optional settings such as Log Encryption, Log File Validation and Log forwarding to CloudWatch logs. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.
AWS CloudTrail with CloudWatch Logs Integration
AWS Services
Configuration to enable AWS CloudTrail including configuration to stream CloudTrail events to CloudWatch Logs. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.
CloudWatch logs
AWS Config
AWS Services
Configuration to enable AWS Config. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.
CloudWatch Log Group
CloudWatch Log Group
Configuration to create a CloudWatch Log Group with option for defining a log retention period.
VPC
Flow Logs
Flow Logs
Flow Logs enables you to capture information about the IP traffic going to and from network interfaces in your VPC. Flow Logs can be enabled on a VPC, subnet, or network interface level.
VPC Traffic Mirroring
VPC
Configuration to enable Traffic Mirroring from a network interface (ENI) of an Amazon EC2 instance, which can then be used for monitoring and security analysis. Traffic Mirroring supports filters and packet truncation so that only traffic of interest is monitored.