Does AWS do internal logging for user access information for AWS services?
0
Does AWS do internal logging for user access information to AWS services if customer disabled logging for the services used explicitly? Major services in questions - Route53, WAF, Cloudfront, S3
Thanks,
- Language
- English
asked 4 years ago522 views
1 Answer
- Newest
- Most votes
- Most comments
1
All of these services are integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service . CloudTrail captures a subset of API calls for particular service or actions as events, including calls from the console and code calls to the APIs. There is also a good blog which shows how to notify on changes to CloudTrail and re-enable logging whenever logging is disabled.
References :
- Logging Amazon S3 API calls using AWS CloudTrail - https://docs.aws.amazon.com/AmazonS3/latest/userguide/cloudtrail-logging.html
- Logging and monitoring in Amazon Route 53 - https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/logging-monitoring.html
- Logging API calls with AWS CloudTrail - https://docs.aws.amazon.com/waf/latest/developerguide/logging-using-cloudtrail.html
- Using AWS CloudTrail to capture requests sent to the CloudFront API - https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/logging_using_cloudtrail.html
- Monitor Changes and Auto-Enable Logging in AWS CloudTrail - https://aws.amazon.com/blogs/mt/monitor-changes-and-auto-enable-logging-in-aws-cloudtrail/
Relevant content
asked 3 years ago
- AWS OFFICIALUpdated a month ago
Thanks for your suggest but let me rephrase my intent - I want to run a website on AWS with highest privacy. I configured the services not to do the access logging. And I want to know if AWS log the user access internally even if I disabled access logging in AWS console.