{"id":68251,"date":"2018-11-29T10:28:06","date_gmt":"2018-11-29T10:28:06","guid":{"rendered":"https:\/\/www.whizlabs.com\/blog\/?p=68251"},"modified":"2020-08-31T18:04:53","modified_gmt":"2020-08-31T18:04:53","slug":"using-central-cloudtrail-s3-bucket-for-multiple-aws-accounts","status":"publish","type":"post","link":"https:\/\/www.whizlabs.com\/blog\/using-central-cloudtrail-s3-bucket-for-multiple-aws-accounts\/","title":{"rendered":"How to Use a Central CloudTrail S3 Bucket for Multiple AWS Accounts?"},"content":{"rendered":"<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Preparing for AWS Certified Security Specialty exam? Logging and Monitoring is an important domain in the exam blueprint with 20% weightage. So, to help you in your <a href=\"https:\/\/www.whizlabs.com\/blog\/prepare-aws-certified-security-specialty-exam\/\" target=\"_blank\" rel=\"noopener noreferrer\">AWS Certified Specialty exam preparation<\/a>, here we cover the the topic &#8211;\u00a0<em>How to Use a Central CloudTrail S3 Bucket for Multiple AWS Accounts<\/em>\u00a0that addresses the &#8220;<em>Logging and Monitoring<\/em>\u201d domain as highlighted in the <span class=\"s3\">AWS Certified Security Specialty Exam Guide.<\/span><\/span><\/p>\n<blockquote><p>Try Now: <a href=\"https:\/\/www.whizlabs.com\/aws-certified-security-specialty\/free-test\/\" target=\"_blank\" rel=\"noopener noreferrer\">AWS Certified Security Specilty Free Test<\/a><\/p><\/blockquote>\n<p><span class=\"s1\">Let\u2019s understand the problem statement first and then we\u2019ll move to the solution.<\/span><\/p>\n<h2 class=\"p3\" style=\"text-align: justify;\"><span class=\"s2\">Problem Statement<\/span><\/h2>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Nowadays, it is not uncommon for companies to have multiple AWS accounts. They could have separate accounts for different environments as shown below:<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68261 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/multiple-aws-accounts-in-different-environments.png\" alt=\"multiple aws accounts in different environments\" width=\"398\" height=\"125\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/multiple-aws-accounts-in-different-environments.png 398w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/multiple-aws-accounts-in-different-environments-300x94.png 300w\" sizes=\"(max-width: 398px) 100vw, 398px\" \/><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Or maybe have different accounts for different business units as shown below:<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68260 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/multiple-aws-accounts-in-different-business-units.png\" alt=\"multiple aws accounts in different business units\" width=\"407\" height=\"129\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/multiple-aws-accounts-in-different-business-units.png 407w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/multiple-aws-accounts-in-different-business-units-300x95.png 300w\" sizes=\"(max-width: 407px) 100vw, 407px\" \/><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">A very important aspect which is undertaken by organizations is to use CloudTrail to monitor all API calls. Some of the benefits of using CloudTrail are:<\/span><\/p>\n<ul class=\"ul1\" style=\"text-align: justify;\">\n<li class=\"li3\"><span class=\"s1\">You can monitor all the activity occurring in your AWS account<\/span><\/li>\n<li class=\"li3\"><span class=\"s1\">It gives the security department to see if any malicious activity is occurring via unwarranted API calls<\/span><\/li>\n<li class=\"li3\"><span class=\"s1\">Ability to stream the API calls to CloudWatch logs or S3 buckets for further analysis<\/span><\/li>\n<\/ul>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">But with the advent of so many accounts, using CloudTrail and multiple S3 buckets across so many accounts is normally not an ideal solution. What\u2019s the most efficient solution to this problem then?\u00a0<\/span><\/p>\n<p style=\"text-align: justify;\"><span class=\"s1\">To Use a Central CloudTrail S3 Bucket for Multiple AWS Accounts, is the most-effective solution. Let&#8217;s dive deep to understand it.<\/span><\/p>\n<h2 class=\"p3\" style=\"text-align: justify;\"><span class=\"s2\">Solution: Using\u00a0Central CloudTrail S3 Bucket for Multiple AWS Accounts<\/span><\/h2>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Companies now adopt having a central Security account and stream all the CloudTrail logs into one account as shown below:<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68253 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/central-security-account.png\" alt=\"central security account\" width=\"390\" height=\"267\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-security-account.png 390w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-security-account-300x205.png 300w\" sizes=\"(max-width: 390px) 100vw, 390px\" \/><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">So let\u2019s look at how you can implement central logging<\/span><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Step 1) Let\u2019s assume that your central account is called cloud-production<\/span><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">In S3 , first create a bucket that will hold all of the CloudTrail log files<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"aligncenter wp-image-68257 size-full\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/create-S3-bucket.png\" alt=\"create s3 bucket\" width=\"654\" height=\"508\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/create-S3-bucket.png 654w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/create-S3-bucket-300x233.png 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/create-S3-bucket-541x420.png 541w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/create-S3-bucket-640x497.png 640w\" sizes=\"(max-width: 654px) 100vw, 654px\" \/><\/p>\n<blockquote><p><span style=\"color: #4db2ec; font-family: Roboto, sans-serif; font-size: 30px; font-style: italic; text-align: justify; text-transform: uppercase;\">Also Read: <a href=\"https:\/\/www.whizlabs.com\/blog\/aws-s3\/\" target=\"_blank\" rel=\"noopener noreferrer\">How to Setup and Use Amazon S3?<\/a><\/span><\/p><\/blockquote>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Step 2) Go to the bucket and add a bucket policy<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68252 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/adding-bucket-policy.png\" alt=\"adding bucket policy\" width=\"509\" height=\"306\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/adding-bucket-policy.png 509w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/adding-bucket-policy-300x180.png 300w\" sizes=\"(max-width: 509px) 100vw, 509px\" \/><\/p>\n<ol class=\"ol1\" style=\"text-align: justify;\">\n<li class=\"li3\"><span class=\"s1\">In the bucket policy first add a policy statement to allow CloudTrail to have the permission to get the bucket ACL<\/span><\/li>\n<li class=\"li3\"><span class=\"s1\">Next, we need to add the permissions for the accounts to have permissions to add objects to the bucket.<\/span><\/li>\n<\/ol>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Here one account 283879671964 is the account number of the production or security account<\/span><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">And the other account 213171387512 is the account number of another account called cloud-staging. In the next step we are going to configure the cloud-staging account to use this bucket for logging purposes.<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68255 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/configure-cloud-staging-account.png\" alt=\"configure cloud staging account\" width=\"543\" height=\"269\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/configure-cloud-staging-account.png 543w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/configure-cloud-staging-account-300x149.png 300w\" sizes=\"(max-width: 543px) 100vw, 543px\" \/><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Step 3) Now log into the other account as shown below. Let\u2019s refer this as the cloud-staging account<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68254 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/cloud-staging-account.png\" alt=\"cloud staging account\" width=\"691\" height=\"202\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/cloud-staging-account.png 691w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/cloud-staging-account-300x88.png 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/cloud-staging-account-640x187.png 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/cloud-staging-account-681x199.png 681w\" sizes=\"(max-width: 691px) 100vw, 691px\" \/><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Go to the CloudTrail service<\/span><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Step 4) Create a new trail in this account<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68256 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/craete-new-cloudtrail.png\" alt=\"create new cloudtrail\" width=\"537\" height=\"172\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/craete-new-cloudtrail.png 537w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/craete-new-cloudtrail-300x96.png 300w\" sizes=\"(max-width: 537px) 100vw, 537px\" \/><\/p>\n<blockquote>\n<p style=\"text-align: left;\">Also Read: <a href=\"https:\/\/www.whizlabs.com\/blog\/aws-cloudtrail\/\" target=\"_blank\" rel=\"noopener noreferrer\">How to Setup CloudTrail?<\/a><\/p>\n<\/blockquote>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Step 5) In the configuration for the CloudTrail, ensure to enter the S3 bucket which was created earlier in the cloud-production account.<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68258 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/enter-s3-bucket-in-cloudtrail.png\" alt=\"enter s3 bucket in cloudtrail\" width=\"687\" height=\"449\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/enter-s3-bucket-in-cloudtrail.png 687w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/enter-s3-bucket-in-cloudtrail-300x196.png 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/enter-s3-bucket-in-cloudtrail-643x420.png 643w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/enter-s3-bucket-in-cloudtrail-640x418.png 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/enter-s3-bucket-in-cloudtrail-681x445.png 681w\" sizes=\"(max-width: 687px) 100vw, 687px\" \/><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">Then go ahead and save the trail.<\/span><\/p>\n<p class=\"p3\" style=\"text-align: justify;\"><span class=\"s1\">After some time, when you go back to your production account and go to the security bucket, you will see the log files for the cloud-staging account<\/span><\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"wp-image-68259 size-full aligncenter\" src=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/sites\/2\/2018\/11\/log-files-for-cloud-staging-account.png\" alt=\"log files for cloud staging account\" width=\"703\" height=\"424\" srcset=\"https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/log-files-for-cloud-staging-account.png 703w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/log-files-for-cloud-staging-account-300x181.png 300w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/log-files-for-cloud-staging-account-696x420.png 696w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/log-files-for-cloud-staging-account-640x386.png 640w, https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/log-files-for-cloud-staging-account-681x411.png 681w\" sizes=\"(max-width: 703px) 100vw, 703px\" \/><\/p>\n<blockquote><p>Other Related Resources:<\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/set-right-rules-for-security-groups-and-nacls\/\" target=\"_blank\" rel=\"noopener noreferrer\">How to Set Right Inbound &amp; Outbound Rules for Security Groups and NACLs?<\/a><\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/iam-and-bucket-policies\/\" target=\"_blank\" rel=\"noopener noreferrer\">Working with IAM and Bucket Policies<\/a><\/p>\n<p><a href=\"https:\/\/www.whizlabs.com\/blog\/granting-access-to-aws-resources-to-third-party\/\" target=\"_blank\" rel=\"noopener noreferrer\">How to Grant Access to AWS Resources to the Third Party via Roles &amp; External Id?<\/a><\/p><\/blockquote>\n<h4 class=\"p3\" style=\"text-align: justify;\"><span class=\"s2\">Summary<\/span><\/h4>\n<ul class=\"ul1\">\n<li class=\"li3\" style=\"text-align: justify;\"><span class=\"s1\">When you have multiple AWS accounts, from a security perspective, its good to have all the logs directed to a central account<\/span><\/li>\n<li class=\"li3\" style=\"text-align: justify;\"><span class=\"s1\">In the central account, create a bucket to hold the logs<\/span><\/li>\n<li class=\"li3\" style=\"text-align: justify;\"><span class=\"s1\">Ensure a bucket policy is in place to provide access to all other accounts the ability to add objects to the central S3 bucket<\/span><\/li>\n<li class=\"li3\" style=\"text-align: justify;\"><span class=\"s1\">Then create a trail in each account and ensure that the bucket name is specified in the cloud trail<\/span><\/li>\n<li style=\"text-align: justify;\">This is the procedure of using\u00a0<span class=\"s1\">Central CloudTrail S3 Bucket for Multiple AWS Accounts<\/span><\/li>\n<\/ul>\n<p style=\"text-align: justify;\">So, how&#8217;s your preparation going for AWS Certified Security Specialty exam? Hope this topic will help you understand the concepts and take your exam preparation one level up. Check your preparation level and give your preparation a new edge with <a href=\"https:\/\/www.whizlabs.com\/aws-certified-security-specialty\/practice-test\/\" target=\"_blank\" rel=\"noopener noreferrer\">AWS Certified Security Specialty practice tests<\/a>. This practice tests series has been curated to help you prepare for the exam and get ready to pass the exam in the first attempt.<\/p>\n<p style=\"text-align: justify;\"><em>Seeking any help\/assistance for your AWS Certified Security Specialty exam preparation? Write us in the comment below or reach us at <a href=\"https:\/\/help.whizlabs.com\/hc\/en-us\/requests\/new\" target=\"_blank\" rel=\"noopener noreferrer\">Whizlabs Helpdesk<\/a>, we&#8217;ll be happy to help you.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Preparing for AWS Certified Security Specialty exam? Logging and Monitoring is an important domain in the exam blueprint with 20% weightage. So, to help you in your AWS Certified Specialty exam preparation, here we cover the the topic &#8211;\u00a0How to Use a Central CloudTrail S3 Bucket for Multiple AWS Accounts\u00a0that addresses the &#8220;Logging and Monitoring\u201d domain as highlighted in the AWS Certified Security Specialty Exam Guide. Try Now: AWS Certified Security Specilty Free Test Let\u2019s understand the problem statement first and then we\u2019ll move to the solution. Problem Statement Nowadays, it is not uncommon for companies to have multiple AWS [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":68266,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[4],"tags":[229,234,381,1046,1579],"class_list":["post-68251","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aws-certifications","tag-aws-certified-security-speciality-exam","tag-aws-certified-security-specialty-exam-preparation","tag-benefits-of-using-cloudtrail","tag-logging-and-monitoring","tag-using-central-cloudtrail-s3-bucket-for-multiple-aws-accounts"],"uagb_featured_image_src":{"full":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",600,315,false],"thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts-150x150.png",150,150,true],"medium":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts-300x158.png",300,158,true],"medium_large":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",600,315,false],"large":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",600,315,false],"1536x1536":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",600,315,false],"2048x2048":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",600,315,false],"profile_24":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",24,13,false],"profile_48":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",48,25,false],"profile_96":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",96,50,false],"profile_150":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",150,79,false],"profile_300":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",300,158,false],"tptn_thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts-250x250.png",250,250,true],"web-stories-poster-portrait":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",600,315,false],"web-stories-publisher-logo":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",96,50,false],"web-stories-thumbnail":["https:\/\/www.whizlabs.com\/blog\/wp-content\/uploads\/2018\/11\/central-cloudtrail-s3-bucket-for-multiple-aws-accounts.png",150,79,false]},"uagb_author_info":{"display_name":"Pavan Gumaste","author_link":"https:\/\/www.whizlabs.com\/blog\/author\/pavan\/"},"uagb_comment_info":3,"uagb_excerpt":"Preparing for AWS Certified Security Specialty exam? Logging and Monitoring is an important domain in the exam blueprint with 20% weightage. So, to help you in your AWS Certified Specialty exam preparation, here we cover the the topic &#8211;\u00a0How to Use a Central CloudTrail S3 Bucket for Multiple AWS Accounts\u00a0that addresses the &#8220;Logging and Monitoring\u201d&hellip;","_links":{"self":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/68251","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/comments?post=68251"}],"version-history":[{"count":1,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/68251\/revisions"}],"predecessor-version":[{"id":75918,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/posts\/68251\/revisions\/75918"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/media\/68266"}],"wp:attachment":[{"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/media?parent=68251"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/categories?post=68251"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whizlabs.com\/blog\/wp-json\/wp\/v2\/tags?post=68251"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}