Ravi Sir's Cyber Security Cards › Interview Cards
What does CloudTrail give you?
What does CloudTrail give you? CloudTrail is an API audit log: who called which AWS API, and when. After an incident, CloudTrail shows the leaked key made 100 calls from a strange country (Example data). “Without CloudTrail, AWS incident response is blind. I keep it on and the logs locked.” It is yo
Read card text
What this card says
Short answer
CloudTrail is an API audit log: who called which AWS API, and when.
Example
After an incident, CloudTrail shows the leaked key made 100 calls from a strange country (Example data).
Say it in the interview
“Without CloudTrail, AWS incident response is blind. I keep it on and the logs locked.”
Why it matters
It is your record of what happened. Keep it immutable so attackers can’t erase it.
Learn more in the lesson: 46.6 AWS Cloud Security Interview Questions