# cloudtrail Published articles for cloudtrail. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Investigate Amazon EKS Audit Logs with Teleport Identity Security DevFeed: [Investigate Amazon EKS Audit Logs with Teleport Identity Security]() Original publisher: [Read original article]() Author: info@goteleport.com (Ben Arent) Published: 2025-11-11T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [Amazon Elastic Kubernetes Service](), [audit](), [Security](), [Kubernetes](), [Amazon Web Services]() Tags: [audit](), [cloudtrail](), [collection](), [kubectl](), [kubernetes](), [metrics](), [security]() ### AI overview Teleport 18 adds official support for importing Amazon EKS Audit Logs into Teleport Identity Security. The feature provides unified visibility into Kubernetes API activity, including actions performed outside Teleport, and supports correlating EKS activity with Teleport access and AWS audit data. ### Source excerpt Learn how Teleport 18 brings Amazon EKS Audit Logs into Identity Security, giving teams unified visibility into all Kubernetes API activity--including shadow access. ## Automate AWS Athena Partitions for Organization CloudTrail Logs and VPC Flow Logs DevFeed: [Automate AWS Athena Partitions for Organization CloudTrail Logs and VPC Flow Logs]() Original publisher: [Read original article]() Author: Aurelien Cerveaux Published: 2022-09-15T06:39:58Z Content type: tutorial Language: en Sources: [betclic-tech - Medium]() Topics: [AWS CloudTrail](), [Amazon Web Services](), [VPC Flow Logs](), [Amazon S3](), [AWS CloudFormation](), [DynamoDB](), [JSON]() Tags: [amazon-s3](), [athena](), [aws](), [aws-cloudtrail](), [cloud](), [cloudformation](), [cloudtrail](), [dynamodb](), [events](), [json](), [vpc-flow-logs]() ### AI overview A tutorial explains how to automate daily AWS Athena partition creation for organization-level CloudTrail and VPC Flow Logs. It describes using Amazon S3, AWS Glue Data Catalog, CloudFormation, SAM, Lambda, DynamoDB, and EventBridge to improve query efficiency and reduce scanned data and cost. ### Source excerpt This article's goal is to explain how to query efficiently, and at low cost with AWS Athena, AWS CloudTrail logs, or VPC Flow logs by automating the creation of Athena partitions daily. AWS CloudTrail AWS CloudTrail is a service that records all API Calls and Events for AWS Accounts, including details on calls made to your AWS Services and the Console as well. Activated at the Organization level, CloudTrail logs help you in several cases: Simplified Compliance Summarizing Accesses Security Analysis and Troubleshooting Monitoring Users and Resources Activities Governance and Investigation CloudTrail Logs are delivered in an S3 Bucket in JSON format through many small files that make these difficult to operate and request. VPC Flow Logs VPC Flow Logs is a feature that allows you to capture traffic information going to and from your network interfaces in your VPC. It helps you to: Analyze and troubleshoot network issues Determine the direction of your traffic Monitor the traffic Like CloudTrail Logs, Flow Logs are published in an S3 Bucket for all accounts in the Organization. AWS Athena AWS Athena is a query service that permits you to analyze data directly in an Amazon S3. You can create tables in Athena which use AWS Glue Data Catalog and are based on an S3 location. To query efficiently and with less scanned data and optimize the cost, we need to create some partitions. To know more about Tables, Databases, and Catalog in Athena. Automate Partitions Creation In our case, we are using CloudTrail Logs and VPC Flow Logs to detail the solution and the source code. All is done in CloudFormation and using SAM to deploy the Lambda. Global Overview We have several parts to automate the creation of our partitions. A common part containing: The Lambda is used to create partitions concerning different log types A DynamoDB table used to store partition names A specific part for each log type contains: The Glue Table with the proper structure An EventBridge Rule to trigger the ## Security Auditing Amazon RDS Database Activity with Teleport DevFeed: [Security Auditing Amazon RDS Database Activity with Teleport]() Original publisher: [Read original article]() Author: info@goteleport.com (Janakiram MSV) Published: 2022-06-08T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Amazon RDS](), [audit](), [Security](), [Amazon Web Services](), [Amazon DynamoDB](), [Amazon EC2](), [VPC]() Tags: [amazon-dynamodb](), [amazon-ec2](), [amazon-rds](), [audit](), [aws](), [bastion-host](), [cloudtrail](), [security](), [vpc]() ### AI overview This tutorial explains how to use Teleport to record and audit Amazon RDS database access events, including live session monitoring, audit logs for DDL and DML queries, and event storage in Amazon DynamoDB. ### Source excerpt This blog post explains how to record and audit Amazon RDS Database activities with Teleport. ## How to Audit SSH Sessions in Amazon EC2 DevFeed: [How to Audit SSH Sessions in Amazon EC2]() Original publisher: [Read original article]() Author: info@goteleport.com (Janakiram MSV) Published: 2022-04-19T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Amazon EC2](), [ssh](), [Tutorial](), [audit](), [Security](), [Amazon S3](), [DynamoDB](), [OpenSSH]() Tags: [amazon-cloudwatch](), [amazon-dynamodb](), [amazon-s3](), [audit](), [aws](), [bastion](), [bastion-host](), [cloudtrail](), [compliance](), [dynamodb](), [ec2](), [how-to](), [infrastructure](), [review](), [s3](), [security](), [security-events](), [ssh](), [storage](), [tutorial]() ### AI overview A tutorial on configuring Teleport to record and audit SSH sessions on Amazon EC2 Linux instances, including centralized session playback and storing Teleport events and recordings in Amazon DynamoDB and Amazon S3. ### Source excerpt This post is a tutorial to set up security session recording for EC2 SSH access and store logs in AWS S3 and DynamoDB. ## Seven Practices to Prepare a Startup for SOC 2 DevFeed: [Seven Practices to Prepare a Startup for SOC 2]() Original publisher: [Read original article]() Published: 2020-03-12T17:49:00Z Content type: tutorial Language: en Sources: [Latacora]() Topics: [soc2](), [Security](), [Terraform](), [CI/CD](), [Google Cloud Identity](), [okta](), [Logging](), [Provisioning](), [AWS CloudTrail](), [protected branches](), [GitHub]() Tags: [aws](), [ci-cd](), [cloudtrail](), [deployment](), [github](), [logging](), [okta](), [patches](), [protected-branches](), [security](), [soc2](), [terraform]() ### AI overview The article recommends seven practices for startups that expect large-company clients to require a SOC 2 report: centralized identity with 2FA, pull-request controls and CI/CD, centralized logging, infrastructure provisioning with Terraform or a similar tool, AWS CloudTrail and AssumeRole, device management with encryption and current patches, and software vendor risk tracking. It also recommends documenting basic policies. ### Source excerpt So, you plan to sell your startup's product to big companies one day. Congratu-dolences! Really, that's probably the only reason you should care about this article. If that's not you, go forth and live your life! We'll ask no more of your time. For the rest of you: Industry people talk about SOC2 a lot, and it's taken on a quasi-mystical status, not least because it's the product of the quasi-mystical accounting industry. But what it all boils down to is: eventually you'll run into big-company clients demanding a SOC2 report to close a sale. You know this and worry about it. ## Using AWS CloudTrail to enhance your serverless application security DevFeed: [Using AWS CloudTrail to enhance your serverless application security]() Original publisher: [Read original article]() Author: Ory Segal Published: 2018-10-11T00:00:00Z Content type: tutorial Language: en Sources: [Serverless Blog]() Topics: [AWS CloudTrail](), [Serverless](), [Application Security](), [Security]() Tags: [application-security](), [aws](), [aws-cloudtrail](), [aws-lambda](), [cloud-computing](), [cloudtrail](), [engineering](), [faas](), [function-as-a-service](), [how-to](), [infrastructure-as-code](), [learn](), [serverless](), [serverless-architecture](), [serverless-framework]() ### AI overview A tutorial on using AWS CloudTrail to improve the security posture of serverless applications. ### Source excerpt Learn how to harness AWS CloudTrail to enhance your serverless application security posture. ## How to monitor AWS account activity with Cloudtrail, Cloudwatch Events and Serverless DevFeed: [How to monitor AWS account activity with Cloudtrail, Cloudwatch Events and Serverless]() Original publisher: [Read original article]() Author: Alex DeBrie Published: 2018-01-15T00:00:00Z Content type: tutorial Language: en Sources: [Serverless Blog]() Topics: [Amazon Web Services](), [AWS CloudTrail](), [Serverless](), [Automation](), [monitor]() Tags: [automation](), [aws](), [aws-lambda](), [cloud-computing](), [cloudtrail](), [engineering](), [faas](), [function-as-a-service](), [how-to](), [infrastructure-as-code](), [monitor](), [serverless](), [serverless-architecture](), [serverless-framework]() ### AI overview A tutorial on monitoring AWS account activity with CloudTrail, CloudWatch Events, and Serverless, including automation that reacts to events from AWS services. ### Source excerpt Level up your AWS automation by reacting to events from AWS services.