Ravi Sir's Cards › AWS
API audit or HTTP access?
This comparison card contrasts API audit or HTTP access. CloudTrail delivery is described as cloudtrail.amazonaws.com puts JSON digests/logs. ALB access logs delivery: Regional ELB account puts access log lines. The card pairs CloudTrail delivery with security audit trail, and ALB access logs delivery with app access analytics.
Read card text
What this card says
API audit or HTTP access?
CloudTrail delivery
cloudtrail.amazonaws.com puts JSON digests/logs.
ALB access logs delivery
Regional ELB account puts access log lines.
Key points
Org API forensics.
Who hit which URL on the ALB.
Example
put-bucket-policy Trail stmts / put-bucket-policy ELB stmts
Use when
Security audit trail.
App access analytics.