Managing AWS Security Strategies: CloudTrail and CloudWatch
Oh, if I had a penny for every time someone said that the cloud was insecure, I’d be a millionaire. The cloud I will actually venture out to say is more secure than on-premises. And it’s the tools that are available to you, it’s how secure you want to make your cloud, that’s how much it will be secure. And how insecure you make your cloud, that’s how insecure it’s going to be. But if you take a look at all of the breaches that have happened so far, they’ve all been against on-premises data centers or they’ve been against faulty misconfigured cloud environments. Now what we’re going to focus on in this lesson in this module is logs. How are we going to generate these logs?
How do we access these logs?
How do we monitor these logs? How do we take action against these logs?
Where do we store these logs?
That’s a fundamental security principle whenever you’re dealing with security in any kind of infrastructure.