Skip to content

Update aws-cloudtrail.md #4703

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Oct 29, 2024
Merged

Update aws-cloudtrail.md #4703

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
e74e74f
Update aws-cloudtrail.md
JV0812 Oct 28, 2024
064b9de
Update docs/integrations/cloud-security-monitoring-analytics/aws-clou…
JV0812 Oct 29, 2024
95cf3f0
Update docs/integrations/cloud-security-monitoring-analytics/aws-clou…
JV0812 Oct 29, 2024
e7c1604
Update docs/integrations/cloud-security-monitoring-analytics/aws-clou…
JV0812 Oct 29, 2024
d10ae50
Merge branch 'main' into DOCS-511
JV0812 Oct 29, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 5 additions & 11 deletions docs/integrations/cloud-security-monitoring-analytics/aws-cloudtrail.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ import useBaseUrl from '@docusaurus/useBaseUrl';
This set of CloudTrail monitoring and analytics dashboards provide one dashboard for the most critical analytics. Think of this bundle of dashboards as a good starting place to see trends and outliers on specific aspects of your CloudTrail data -- including access monitoring, login activity, system monitoring, privileged activity, and threat intelligence.


## Collecting logs for the AWS CloudTrail PCI Compliance App
## Collecting logs for the AWS CloudTrail app

This section has instructions for configuring log collection for the AWS CloudTrail app.

Expand Down Expand Up @@ -87,25 +87,19 @@ _sourceCategory=AWS_EAGLE (*Security* OR *Network*)
In some cases, your query results may show `"HIDDEN_DUE_TO_SECURITY_REASONS"` as the value of the `userName` field. That's because AWS does not log the user name that was entered when a sign-in failure is caused by an incorrect user name.


## Installing the PCI Compliance AWS CloudTrail App
## Installing the AWS CloudTrail app

Now that you have set up collection, install the Amazon CloudTrail - Cloud Security Monitoring and Analytics app to use the preconfigured searches and Dashboards that provide insight into your data.

import AppInstall from '../../reuse/apps/app-install.md';

<AppInstall/>

## Viewing AWS CloudTrail Dashboards
## Viewing AWS CloudTrail dashboards

The Cloud Security Monitoring & Analytics for AWS CloudTrail App provides dashboards that you can modify for your specific security operational needs.

* Access Monitoring
* Login Activity
* Account and System Monitoring
* Overview
* Privileged Activity
* Threat Intelligence
import ViewDashboards from '../../reuse/apps/view-dashboards.md';

<ViewDashboards/>

### Security Analytics - Access Monitoring

Expand Down
Loading