Cloud Security Plus' auto-configuration feature for AWS

When it comes to keeping tabs on your Amazon Web Services (AWS) environment, having a cloud log management tool with out-of-the-box support for CloudTrail logs is handy. But before your log management solution can start receiving CloudTrail logs, your AWS environment needs some tweaking. You could manually configure things in AWS—or you can have your cloud log management tool do it for you.

Cloud Security Plus is the kind of self-sufficient cloud log management tool you need. With an auto-configuration feature, Cloud Security Plus can get your AWS environment ready for CloudTrail log generation and transmission all by itself. The workflow of Cloud Security Plus' auto-configuration feature goes something like this:

• AWS stores CloudTrail logs in folders inside S3 buckets. AWS' notification service—Simple Notification Service (SNS)—can be customized to generate notifications when CloudTrail log files are moved into S3 buckets.
• As soon as a notification is triggered by SNS, the name of the newly created log file gets added to the queue in AWS' queuing service—Simple Queue Service (SQS). Cloud Security Plus retrieves the sequence of log file names from the SQS queue. It then pulls the corresponding log files from the S3 bucket.

To kickstart this mechanism yourself, you'd need to enable CloudTrail, S3, SNS, and SQS, and assign the right permissions to each service. Cloud Security Plus saves you from all these hassles. All you have to do is to enter your AWS secret key ID and access key, and Cloud Security Plus will get your AWS setup ready.