Amazon S3 bucket logging

In the Amazon S3 architecture, data is stored as objects in scalable containers known as buckets. Buckets store data of all sizes—from small text files to large databases. S3 buckets are created and managed in the S3 web interface console, allowing users to oversee their storage infrastructure.

Cloud Security Plus helps keep track of bucket activity in the S3 architecture with reports that cover key actions, such as the creation and deletion of S3 buckets. These reports answer the following questions about S3 bucket activity:

• Who performed which event?
• Which source IP address did the request come from?
• When did the event occur?
• What error prevented the event from being successful?

This information helps track changes made to AWS resources and troubleshoot operational issues.

Amazon S3 bucket activity reports

All S3 bucket activity: Records every event that happens in the S3 service, including bucket-level and object-level actions.

Recently modified buckets: Lists the buckets that were recently modified with information on who performed the action and from which source IP the action was performed.

Recently deleted buckets: Lists the buckets that were recently deleted with information on who performed the action and from which source IP the action was performed.

Recently failed buckets: Aggregates the unsuccessful events that occur in the S3 service. Lists details on the error that caused the action to fail, including the error code and its corresponding message.

Reports on security group changes

• Recent Security Group Configuration Changes
• Recent Network ACL Changes

RDS insights offered by Cloud Security Plus

• RDS Error Events
• Recent DB Security Group Configuration Changes
• Recent RDS Instance Activity
• Recent DB Cluster Activity
• Recent DB Snapshot Activity