4 ms·
You can't enable or disable AWS Cloud Trail as far I know? You can enable the persistent storage of trails. But you can always access 90 days of events regardl
by arianvanp 1y ago
You can't enable or disable AWS Cloud Trail as far I know?
You can enable the persistent storage of trails. But you can always access 90 days of events regardless of that being enabled
- frenchtoast8 1y agoThis was my understanding as well, but earlier I couldn't find any documentation to prove this so I never wrote a comment. CloudTrail can be configured to save logs to S3 or CloudWatch Logs, but I think that even if you were to disable, delete, or tamper with these logs, you can still search and download unaltered logs directly from AWS using the CloudTrail Events page.
- ctoth 1y agoOnly management events, see https://news.ycombinator.com/item?id=45532772 https://news.ycombinator.com/item?id=45532772