Search icon CANCEL
Subscription
0
Cart icon
Cart
Close icon
You have no products in your basket yet
Save more on your purchases!
Savings automatically calculated. No voucher code required
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
AWS Administration - The Definitive Guide. - Second Edition

You're reading from  AWS Administration - The Definitive Guide. - Second Edition

Product type Book
Published in Mar 2018
Publisher Packt
ISBN-13 9781788478793
Pages 358 pages
Edition 2nd Edition
Languages
Author (1):
Yohan Wadia Yohan Wadia
Profile icon Yohan Wadia
Toc

Table of Contents (17) Chapters close

Title Page
Packt Upsell
Contributors
Preface
1. What's New in AWS? 2. Managing EC2 with Systems Manager 3. Introducing Elastic Beanstalk and Elastic File System 4. Securing Workloads Using AWS WAF 5. Governing Your Environments Using AWS CloudTrail and AWS Config 6. Access Control Using AWS IAM and AWS Organizations 7. Transforming Application Development Using the AWS Code Suite 8. Messaging in the Cloud Using Amazon SNS and Amazon SQS 9. Powering Analytics Using Amazon EMR and Amazon Redshift 10. Orchestrating Data using AWS Data Pipeline 11. Connecting the World with AWS IoT and AWS Greengrass 1. Other Books You May Enjoy Index

Tips and best practices


Here's a list of a few essential tips and best practices that you ought to keep in mind when working with AWS CloudTrail, AWS Config, and security in general:

  • Analyze and audit security configurations periodically: Although AWS provides a variety of services for safeguarding your cloud environment, it is the organization's mandate to ensure that the security rules are enforced and periodically verified against any potential misconfigurations.
  • Complete audit trail for all users: Ensure that all resource creation, modifications, and terminations are tracked minutely for each user, including root, IAM, and federated users.
  • Enable CloudTrail globally: By enabling logging at a global level, CloudTrail can essentially capture logs for all AWS services, including the global ones such as IAM, CloudFront, and so on.
  • Enable CloudTrail Log file validation: An optional setting, however it is always recommended to enable CloudTrail Log file validations for an added layer of integrity...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at ₹800/month. Cancel anytime