Beginner's Guide to AWS CloudTrail for Security - Full Course

Get started with AWS CloudTrail: one of the most important security services that AWS offers. While the CloudTrail service is enabled by default when you create an AWS account, it's enabled with limited functionality that can leave you blind and can hinder your ability to investigate security incidents. For example, there's a very big difference between Management Events, Data Events, and Insights Events, and only one of those is enabled by default. This course will teach you those differences and the 3 main ways that CloudTrail records data so that you can make an informed decision about what you or your organization needs.

After covering important concepts, we'll jump in hands-on and learn how to use CloudTrail's Event History, how to create your first trail, how to enable notifications with #CloudWatch and #SNS, how to use #CloudTrail Insights, and how to work with CloudTrail Lake.

Finally, you will learn how to secure your CloudTrail trails and log files with best practices using #IAM, #log file integrity, #encryption, and the Security Hub Controls checklist.

Whenever someone wants to get started with #AWS #security, coupled with our Introduction to AWS Security course, we highly recommend starting with this course and understanding CloudTrail. This service gives you visibility into your AWS environments, and without visibility, you do not have security.

📜 Cheat Sheets & Additional Resources 📜
This free course comes with cheat sheets available for download from our course page: https://cybr.com/courses/beginners-gu...

⏰ Timestamps ⏰
00:00:00 - 00:03:20 - About the course and author
00:03:21 - 00:07:46 - What is CloudTrail?
00:07:47 - 00:15:33 - Management, Data, and Insights Events
00:15:34 - 00:20:23 - The 3 ways of recording data
00:20:24 - 00:27:57 - Working with Event History
00:27:58 - 00:31:25 - Creating your first trail
00:31:26 - 00:36:54 - Working with CloudTrail trails
00:36:55 - 00:41:20 - Working with CloudWatch Logs and SNS Notifications
00:41:21 - 00:45:46 - Working with CloudTrail Insights
00:45:47 - 00:55:34 - Working with CloudTrail Lake
00:55:35 - 01:02:26 - Monitor CloudTrail itself
01:02:27 - 01:06:13 - IAM
01:06:14 - 01:08:16 - Log file integrity
01:08:17 - 01:10:53 - Encryption
01:10:54 - 01:17:00 - Security Hub Controls for CloudTrail
01:17:01 - 01:17:46 - Next steps

#cloudsecurity