Ravi Sir's Cards › AWS
Central or local?
This comparison card contrasts Central or local. Central log-archive account: Harder for attackers in app account to wipe evidence. Logs in the app account is described as simpler. It also notes weaker blast-radius isolation. The card pairs Central log-archive account with production orgs, and Logs in the app account with learning sandboxes.
Read card text
What this card says
Central or local?
Central log-archive account
Harder for attackers in app account to wipe evidence.
Logs in the app account
Simpler; weaker blast-radius isolation.
Key points
Org security baseline.
Tiny single-account lab.
Example
Cross-account bucket policy / Same-account Trail bucket
Use when
Production orgs.
Learning sandboxes.