Skip to content
No description, website, or topics provided.
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.gitignore
LICENSE
README.md
buildspec.yml
cfn-cloudtrail.yaml

README.md

CloudFormation Template for CloudTrail

Purpose

This template (cfn-cloudtrail.yaml) is designed to be used in a single AWS account. The script creates an S3 bucket, and CloudTrail enabled for all regions. Optionally you can enable SNS to publish notifications when new log files arrive, and you can enable CloudWatch logs to push logs into CloudWatch.

Finally, the template sets a bucket policy that prevents all users except root from deleting log files from S3.

The script takes care of everything needed for log expiration, and ultimate deletion.

Dependencies

Amazon Services

  • CloudTrail
  • S3
  • IAM
  • SNS (optional)
  • CloudWatch Logs (optional)
You can’t perform that action at this time.