NEW: The State of AWS Security 2026 - Free WhitepaperFree AWS Security Whitepaper

CloudTrail

6 items across 3 sections

Blog Posts2

I Built a Free AWS IAM Activity Tracker Because CloudTrail Alone Isn't Enough

A serverless IAM activity monitoring tool that tracks IAM, STS, and console signin events across all AWS regions with real-time security alerts and long-term analytics.

10 min read · 2026-01-12

The Agent's AWS Footprint

Part 15 of 16 in the AWS Security Agent: From Zero to Hero series. What AWS Security Agent leaves behind in your own account. CloudTrail events, Secrets Manager entries, and VPC Flow Logs, with the commands to audit and observe every run yourself.

14 min read · 2026-07-29

Weekly News1

Week 30 - July 20-26, 2026

GuardDuty gets an on-demand investigation agent in public preview, Secrets Manager starts publishing secret-change events to EventBridge, and CloudTrail learns to filter network activity logging by identity. Five more bulletins close out July, including a TLS 1.3 record-drop flaw in s2n-tls and a third AgentCore SDK patch this summer.

2026-07-20 - 2026-07-26

Best Practices3

AWS DynamoDB Security Best Practices

Comprehensive guide to securing Amazon DynamoDB. Covers CMK encryption, PITR, deletion protection, fine-grained access control, VPC endpoints, CloudTrail data events, resource-based policies, DAX encryption, and global tables security.

20 min read

AWS CloudTrail Security Best Practices

Comprehensive guide to securing AWS CloudTrail. Covers organization trails, KMS encryption, log integrity validation, S3 bucket hardening, CloudWatch integration, data events, Network Activity Events, Insights, SCP anti-tampering, CloudTrail Lake, and continuous audit.

14 min read

AWS Secrets Manager Security Best Practices

Comprehensive guide to securing AWS Secrets Manager. Covers automatic rotation, custom Lambda rotation, KMS encryption, resource policies, VPC endpoints, multi-region replication, batch retrieval, and continuous compliance.