Ravi Sir's Cyber Security Cards › Interview Cards
Why enable CloudTrail and GuardDuty in a talking-point answer?
Why enable CloudTrail and GuardDuty in a talking-point answer? CloudTrail records who called which AWS API; GuardDuty adds managed threat detection. CloudTrail shows the leaked key’s calls; GuardDuty flags the odd location. “CloudTrail for the audit trail, GuardDuty for the alerts, both on by defaul
Read card text
What this card says
Short answer
CloudTrail records who called which AWS API; GuardDuty adds managed threat detection.
Example
CloudTrail shows the leaked key’s calls; GuardDuty flags the odd location.
Say it in the interview
“CloudTrail for the audit trail, GuardDuty for the alerts, both on by default.”
Why it matters
Without them, AWS incident response is blind.
Learn more in the lesson: 47.6 Cloud and AWS Security MNC Themes