AWS CloudTrail Review
Rating: 10 out of 10
IncentivizedUse Cases and Deployment Scope
AWS CloudTrail is essential to our AWS architecture design. It is used by every single account within our AWS Organization (all accounts within the company). From the moment a child account is added to our organization, AWS CloudTrail is baked in and enforced for its entire lifespan. The business problem that it solves is mainly to satisfy requirements for our security and governance teams. On top of the security features, it allows the Cloud Admins to help our users troubleshoot and backtrack when issues arise.
Pros
- AWS native service
- Extremely powerful
- Multi-region support
- Optional encryption
- File integrity validation
Cons
- [In my experience] Cost can easily get out of control with multiple trails on full logging
- Logs can be difficult to decipher
Likelihood to Recommend
Highly recommended. This is an essential service for any Cloud solution. There are probably other products that will accomplish these same objectives but AWS CloudTrail being an integrated native solution is very hard to beat. AWS CloudTrail can also be integrated with SNS, SQS and passed on-prem to data lakes or visualization tools.
Vetted Review
2 years of experience