{"id":17447,"date":"2016-12-13T06:47:21","date_gmt":"2016-12-13T06:47:21","guid":{"rendered":"https:\/\/www.whizlabs.com\/?p=17447"},"modified":"2024-05-21T15:48:30","modified_gmt":"2024-05-21T10:18:30","slug":"aws-cloudtrail","status":"publish","type":"post","link":"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/","title":{"rendered":"AWS Certification : How to set up CloudTrail?"},"content":{"rendered":"<p>We have launched <a href=\"http:\/\/whizlabs.com\/aws-solutions-architect-associate\/\" target=\"_blank\" rel=\"noopener\">AWS Certified Solutions Architect Associate<\/a> certification exam which is the basic level of <strong>AWS certifications<\/strong>. As part of training AWS certification topics, we have started writing important topics that are useful for <a title=\"How to prepare for AWS Certified Solutions Architect Associate certification exam?\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-certified-solutions-architect-associate\/\">preparing for the aws certification exams<\/a>. In this articles, we are writing about AWS CloudTrail logs, these topics are part of the security in Amazon Web Services (AWS). Here is the snapshot of the <a href=\"https:\/\/d0.awsstatic.com\/training-and-certification\/docs-sa-assoc\/AWS_certified_solutions_architect_associate_blueprint.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">exam blueprint<\/a>.<\/p>\n<p><b>Exam Objective<\/b><\/p>\n<p style=\"text-align: justify;\">This topic addresses the Data Security topic as highlighted in the AWS Blueprint for the exam guide. <a href=\"http:\/\/awstrainingandcertification.s3.amazonaws.com\/production\/AWS_certified_solutions_architect_associate_blueprint.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">Click here<\/a> to view it.<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/cloud-trail.png\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-17479\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/cloud-trail.png\" alt=\"What is Cloud Train in AWS and how to prepare for certification?\" width=\"642\" height=\"341\" \/><\/a><\/p>\n<p style=\"text-align: justify;\"><strong>AWS CloudTrail is a service provided with AWS that helps organizations have a better tracking mechanism that helps them comply with security standards.<\/strong><\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_76 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #ea7e02;color:#ea7e02\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #ea7e02;color:#ea7e02\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/#What_is_AWS_CloudTrail\" >What is AWS CloudTrail?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/#The_CloudTrail_Architecture\" >The CloudTrail Architecture<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/#How_do_we_set_AWS_CloudTrail\" >How do we set AWS CloudTrail?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/#Certification_Points_to_Remember_about_CloudTrail\" >Certification\u00a0Points to Remember about CloudTrail<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/#Summary\" >Summary<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/#Practice_Questions\" >Practice Questions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/#Technical_Support\" >Technical Support<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"What_is_AWS_CloudTrail\"><\/span>What is AWS CloudTrail?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/aws-cloudtrial.png\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-17483\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/aws-cloudtrial.png\" alt=\"AWS CloudTrail\" width=\"630\" height=\"277\" \/><\/a><\/p>\n<p style=\"text-align: justify;\">In AWS, there is a security mechanism that allows one to record all the API calls made to AWS. By default, any action you perform in AWS, such as creating EC2 instances or databases or any other action in the end is done via an API call. So even if you go to the AWS console and create an EC2 instance from the dashboard, in the end everything is done via an API call.<\/p>\n<p style=\"text-align: justify;\">So CloudTrail allows one to record all the calls being made to the AWS\u00a0account. CloudTrail was designed with security compliance in mind. Mostly in many organizations, in order to comply with security compliance regulations, one needs to log all key interactions with systems. Some of the elements recorded by AWS CloudTrail are given below.<\/p>\n<ul>\n<li style=\"text-align: justify;\">The identity of the person making the AWS API call<\/li>\n<li style=\"text-align: justify;\">The time of the API call \u2013 This is known as event time. Here the date and time the request was made, in coordinated universal time.<\/li>\n<li style=\"text-align: justify;\">The source IP Address of the API call<\/li>\n<li style=\"text-align: justify;\">The request parameters for the API call<\/li>\n<li style=\"text-align: justify;\">The elements in the response to the API call<\/li>\n<li style=\"text-align: justify;\">The service making the call. This would be a short name for the service. So if it was EC2 that was the service, it would be ec2.amazonaws.com.<\/li>\n<li style=\"text-align: justify;\">The region that made the call such us-east-1<\/li>\n<li style=\"text-align: justify;\">The agent that made the call. The agent can be the AWS\u00a0console or the CLI or a programming interface. So if it was the console then it would be console.amazonaws.com.<\/li>\n<li style=\"text-align: justify;\">If there was an error in the request then the errorID and error message would also be included in the call.<\/li>\n<li style=\"text-align: justify;\">The event type, whether it was a console event (Consolesignin event), an API call (AwsApiCall) or a service event (AwsServiceEvent).<\/li>\n<\/ul>\n<p>Here is the <a href=\"https:\/\/aws.amazon.com\/cloudtrail\/\" target=\"_blank\" rel=\"noopener noreferrer\">official link<\/a> from AWS that explains about the CloudTrail. Here is their definition:<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/aws-cloud-trail-definition.png\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-17480\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/aws-cloud-trail-definition.png\" alt=\"CloudTrail in AWS\" width=\"594\" height=\"423\" \/><\/a><\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_CloudTrail_Architecture\"><\/span>The CloudTrail Architecture<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p style=\"text-align: justify;\">The below diagram from AWS documentation shows the architecture of AWS CloudTrail. Let\u2019s go through each bit of the image below in a little more detail.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-1.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17449\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-1.jpg\" alt=\"aws-article2-1\" width=\"671\" height=\"615\" \/><\/a><\/p>\n<ul>\n<li style=\"text-align: justify;\">The API call \u2013 A user can make an API call via\n<ol>\n<li><strong>The AWS Console<\/strong> \u2013 Here a user can log in, utilize the aws services in the dashboard and work with them accordingly.<\/li>\n<li><strong>The AWS CLI<\/strong> \u2013 This is the command line interface provided by AWS. Here also users can log in via the command prompt and fire commands against the various AWS services.<\/li>\n<li><strong>The SDK<\/strong> \u2013 There are various software development kits available for languages such as .Net and Java. Even calls made through these programming languages can be tracked via CloudTrail.<\/li>\n<\/ol>\n<\/li>\n<li style=\"text-align: justify;\">All AWS services can be tracked via CloudTrail. So in the diagram you can see all the AWS services and all can be tracked via CloudTrail.<\/li>\n<li style=\"text-align: justify;\"><strong>The logging of all calls will be done in S3. So when CloudTrail records a call, it can logged into a dedicated S3 bucket<\/strong>. You can have an optional SNS topic that can send notifications based on the log calls that are received.<\/li>\n<li style=\"text-align: justify;\">And finally you can have the Log Analysis carried out for the information logged in the S3 bucket from various AWS partners. For the list of partners please visit <a href=\"https:\/\/aws.amazon.com\/cloudtrail\/partners\/\" target=\"_blank\" rel=\"noopener noreferrer\">this link<\/a><\/li>\n<\/ul>\n<h2 style=\"text-align: justify;\"><span class=\"ez-toc-section\" id=\"How_do_we_set_AWS_CloudTrail\"><\/span><b>How do we set AWS CloudTrail?<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Now let\u2019s look in detail and the steps required to enable CloudTrail<\/p>\n<p><strong>Step 1:<\/strong> Log into your AWS Console. You will see CloudTrail under Management Tools.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-2.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17450\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-2.jpg\" alt=\"AWS Console and CloudTrail Option\" width=\"636\" height=\"439\" \/><\/a><\/p>\n<p><strong>Step 2:<\/strong> Click on \u201cGet Started Now\u201d<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-3.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17451\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-3.jpg\" alt=\"Getting Started with CloudTrail\" width=\"711\" height=\"344\" \/><\/a><\/p>\n<p style=\"text-align: justify;\"><strong>Step 3:<\/strong> In the next screen , you need to give a name to the trail , choose whether to apply the trail to all regions and provide the name of the new S3 bucket where this trail needs to be stored.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-41.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17455\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-41.jpg\" alt=\"Enable CloudTrail Log Feature\" width=\"707\" height=\"291\" \/><\/a><\/p>\n<p>You need to need to click on the Turn On button.<\/p>\n<p>Once complete, you can see that the trail is enabled and the Logging status is set to true.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-5.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17456\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-5.jpg\" alt=\"AWS CloudTrail Logs List in S3 Bucket\" width=\"709\" height=\"104\" \/><\/a><\/p>\n<p style=\"text-align: justify;\"><strong>Step 4:<\/strong> Now perform some actions on AWS such as creating new instances or any other action as desired. Then go to the S3 bucket named \u201cprivatetrail\u201d. This is the bucket we have mentioned when enabling CloudTrail.<\/p>\n<p style=\"text-align: justify;\"><strong>Step 5:<\/strong> Now go to S3. In the privatetrail bucket you will now see a folder named \u201cAWSLogs\u201d. This is automatically created by CloudTrail.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-6.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17457 size-full\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-6.jpg\" alt=\"CloudTrail Logs\" width=\"305\" height=\"133\" \/><\/a><\/p>\n<p><strong>Step 6:<\/strong> The drill down further to see the logs stored.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-7.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17458 size-full\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-7.jpg\" alt=\"CloudTrail Logs details\" width=\"323\" height=\"135\" \/><\/a><\/p>\n<p><strong>Step 7:<\/strong> Click on the CloudTrail folder.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-8.jpg\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-17459\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-8.jpg\" alt=\"aws-article2-8\" width=\"373\" height=\"123\" \/><\/a><\/p>\n<p><strong>Step 8:<\/strong> You will now see a separate folder for each region.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-9.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17460 size-full\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-9.jpg\" alt=\"CloudTrail Region List\" width=\"574\" height=\"355\" \/><\/a><\/p>\n<p><strong>Step 9:<\/strong> Drill down further in the desired region and you will see the logs are stored in a date wise folder format.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-10.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17461 size-full\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-10.jpg\" alt=\"Logs Details for AWS Security\" width=\"654\" height=\"83\" \/><\/a><\/p>\n<p><strong>Step 10:<\/strong> You can then download the respective log file.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-11.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17462 size-full\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-11.jpg\" alt=\"Download AWS CloudTrail logs\" width=\"435\" height=\"409\" \/><\/a><\/p>\n<p>In the log file , you will have a JSON output of all the details of all API calls made.<\/p>\n<pre>{ \r\n   \"Records\":[ \r\n      { \r\n         \"eventVersion\":\"1.05\",\r\n         \"userIdentity\":{ \r\n            \"type\":\"Root\",\r\n            \"principalId\":\"085363624145\",\r\n            \"arn\":\"arn:aws:iam::085553624145:root\",\r\n            \"accountId\":\"085363884145\",\r\n            \"accessKeyId\":\"ASIAJBN375ELM5JEK3CQ\",\r\n            \"sessionContext\":{ \r\n               \"attributes\":{ \r\n                  \"mfaAuthenticated\":\"false\",\r\n                  \"creationDate\":\"2016-12-11T04:04:55Z\"\r\n               }\r\n            }\r\n         },\r\n         \"eventTime\":\"2016-12-11T04:06:50Z\",\r\n         \"eventSource\":\"cloudtrail.amazonaws.com\",\r\n         \"eventName\":\"DescribeTrails\",\r\n         \"awsRegion\":\"ap-northeast-1\",\r\n         \"sourceIPAddress\":\"86.99.46.215\",\r\n         \"userAgent\":\"console.amazonaws.com\",\r\n         \"requestParameters\":{ \r\n            \"trailNameList\":[ \r\n\r\n            ]\r\n         },\r\n         \"responseElements\":null,\r\n         \"requestID\":\"3dc3c9ec-bf57-11e6-bc57-3b88036392cf\",\r\n         \"eventID\":\"094bfabe-f597-4005-b7ca-86b19cb770fe\",\r\n         \"eventType\":\"AwsApiCall\",\r\n         \"recipientAccountId\":\"085363624145\"\r\n      }\r\n   ]\r\n}\r\n<\/pre>\n<p>You can actually see the useful following information<\/p>\n<ul>\n<li>The IAM user who performed the action<\/li>\n<li>The time of the event<\/li>\n<li>The source of the event<\/li>\n<li>The IP Address<\/li>\n<li>The parameters and response of the event<\/li>\n<\/ul>\n<p><strong>Step 11:<\/strong> Even when you go back to your CloudTrail, you will be able to see the individual requests as events.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-12.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17463\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-12.jpg\" alt=\"Log Requests\" width=\"671\" height=\"212\" \/><\/a><\/p>\n<p>If you click on any event, you will see the details of the event, the same which you can see in the log file.<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-13.jpg\"><img decoding=\"async\" class=\"aligncenter wp-image-17464\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2024\/05\/AWS-Article2-13.jpg\" alt=\"Log Request Event\" width=\"691\" height=\"155\" \/><\/a><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Certification_Points_to_Remember_about_CloudTrail\"><\/span><b>Certification\u00a0Points to Remember about CloudTrail<\/b><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Here is the summary of key points that can be remembered for the certification preparation. You may encounter similar type of questions in the certification exam.<\/p>\n<ol>\n<li style=\"text-align: justify;\">You can apply cloud trail either to all regions or to specific regions.<\/li>\n<li style=\"text-align: justify;\">The API Activity recorded in Cloudtrail remains for 7 days.<\/li>\n<li style=\"text-align: justify;\">There are a list of services which CloudTrail can monitor , for the entire list of services please visit the <a href=\"http:\/\/docs.aws.amazon.com\/awscloudtrail\/latest\/userguide\/cloudtrail-supported-services.html\" target=\"_blank\" rel=\"noopener noreferrer\">link<\/a><\/li>\n<li style=\"text-align: justify;\">By default all logs are encrypted by server side encryption when stored in S3.<\/li>\n<li style=\"text-align: justify;\">All events are delivered to the S3 bucket every 5 minutes.<\/li>\n<li>You can also configure CloudTrail events from multiple accounts to send logs to one account. So suppose you had accounts A,B, C and D. You will then need to follow the below steps to ensure that logs are delivered to just one bucket.\n<ul>\n<li style=\"text-align: justify;\">First enable CloudTrail in one account say account A.<\/li>\n<li style=\"text-align: justify;\">Update the bucket policy on your destination bucket to grant cross-account permissions to CloudTrail<\/li>\n<li style=\"text-align: justify;\">Then enable CloudTrail in all other accounts and set the destination bucket to that in the bucket defined in account A.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"Summary\"><\/span>Summary<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>I hope this article is very useful for you to understand the concepts behind <strong>CoudTrail<\/strong> for tracking the AWS account activity. Note that security is one of the important concepts that has to be prepared very well for passing the exam. We are going to write series of articles on the similar topics to teach you on how to use AWS with respect to prepare for the AWS certification exams like; AWS Certified Cloud Practitioner, AWS Certified Developer Associate, <span data-sheets-value=\"{&quot;1&quot;:2,&quot;2&quot;:&quot;aws devops&quot;}\" data-sheets-userformat=\"{&quot;2&quot;:14337,&quot;3&quot;:{&quot;1&quot;:1},&quot;14&quot;:{&quot;1&quot;:3,&quot;3&quot;:1},&quot;15&quot;:&quot;Calibri&quot;,&quot;16&quot;:11}\"><a href=\"https:\/\/www.whizlabs.com\/aws-devops-certification-training\/\" target=\"_blank\" rel=\"noopener\">AWS Devops<\/a> and more others<\/span>.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Practice_Questions\"><\/span>Practice Questions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>It is important to practice more number of questions for preparing for the solutions architect certification exam. We have prepared 300+ high quality questions that covers all the exam objectives and provides explanation for all the option given for the question. This would help you to improve our confidence on the exam before you are taking the real exam.<\/p>\n<ul>\n<li><strong><a href=\"https:\/\/www.whizlabs.com\/aws-solutions-architect-associate\/practice-tests\/\">300+ Practice Questions for Solutions Architect Associate Exam<\/a><\/strong><\/li>\n<li><a title=\"How to prepare for AWS Certified Solutions Architect Associate certification exam?\" href=\"https:\/\/www.whizlabs.com\/blog\/aws-certified-solutions-architect-associate\/\"><strong>How to prepare for solutions architect associate exam?<\/strong><\/a><\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Technical_Support\"><\/span>Technical Support<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>If you are looking for any technical support like more explanation on each questions or clarifications, we have a dedicated support for Amazon Web Services (AWS) to answer all your queries. You can drop us a mail at info@whizlabs.com with your queries. We would respond to your questions within 12 hours of time.<\/p>\n<p><strong>Good luck for your exam preparation!!<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>We have launched AWS Certified Solutions Architect Associate certification exam which is the basic level of AWS certifications. As part of training AWS certification topics, we have started writing important topics that are useful for preparing for the aws certification exams. In this articles, we are writing about AWS CloudTrail logs, these topics are part of the security in Amazon Web Services (AWS). Here is the snapshot of the exam blueprint. Exam Objective This topic addresses the Data Security topic as highlighted in the AWS Blueprint for the exam guide. Click here to view it. AWS CloudTrail is a service [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"default","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[3923,3924,3623,295,3919,302],"class_list":["post-17447","post","type-post","status-publish","format-standard","hentry","category-aws-certifications","tag-aws-cloud-practitioner-exam","tag-aws-devops","tag-aws-devops-engineer","tag-aws-security-certification","tag-aws-solution-architect-associate","tag-aws-solutions-architect-associate"],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false,"profile_24":false,"profile_48":false,"profile_96":false,"profile_150":false,"profile_300":false,"tptn_thumbnail":false,"web-stories-poster-portrait":false,"web-stories-publisher-logo":false,"web-stories-thumbnail":false},"uagb_author_info":{"display_name":"Pavan Gumaste","author_link":"https:\/\/www.whizlabs.com\/blog\/author\/pavan\/"},"uagb_comment_info":4,"uagb_excerpt":"We have launched AWS Certified Solutions Architect Associate certification exam which is the basic level of AWS certifications. As part of training AWS certification topics, we have started writing important topics that are useful for preparing for the aws certification exams. In this articles, we are writing about AWS CloudTrail logs, these topics are part&hellip;","_links":{"self":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/17447","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/comments?post=17447"}],"version-history":[{"count":5,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/17447\/revisions"}],"predecessor-version":[{"id":96270,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/17447\/revisions\/96270"}],"wp:attachment":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/media?parent=17447"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/categories?post=17447"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/tags?post=17447"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}