Prerequisites

Create a user in IAM console

1. Sign in to your AWS Management console and open the IAM console.
2. In the navigation menu, select Users, and then click Add users.
3. Enter the User name for the new user, and click Next.
4. On the Set permissions page, select Attach policies directly.
5. Find and attach the following policies to this user:
• AmazonFSxConsoleReadOnlyAccess policy
• CloudWatchReadOnlyAccess policy
6. Click Next.
7. Review your choices and click Create user.

   

8. Once the user is created, select the user and click the Security credentials tab.
9. On the Access keys panel, click Create access key, select Other as your use case, and click Next.
10. Set a suitable description tag value if required and click Create access key.
11. Once the key is created, you can view the user's Access key and the Secret access key. Copy them to your clipboard as you will need them when configuring Amazon FSx in ADAudit Plus, and click Done.

    

Enable file access auditing on the Amazon FSx file system

1. Open the Amazon FSx console.
2. Navigate to File systems and select the Windows file system for which you want to enable auditing.
3. Select the Administration tab.
4. On the File Access Auditing panel, click Manage.

   

5. On the Manage file access auditing settings dialog, enable logging of both successful and failed attempts for Log access to files and folders and Log access to file shares.
6. Select CloudWatch Logs as your audit log destination and then choose the default log stream, /aws/fsx/windows.
7. Click Save.

   

8. From the navigation bar on the top, click the region list to the left of your account information and note the region code. For example: us-west-1. You will need this later when configuring Amazon FSx in ADAudit Plus.