July 2017
Intermediate to advanced
402 pages
9h 38m
English
When we created our CloudFormation template, we enabled the creation of digest files. Thanks to those files, we can make sure that no CloudTrail log files (and digest files) were modified or deleted. To do so, we first need to get our Amazon Resource Name (ARN). We can get it using the following command:
$ aws cloudtrail describe-trails
{
"trailList": [
{
"IncludeGlobalServiceEvents": true,
"Name": "cloudtrail-myTrail-X85D48OAI8Q4",
"TrailARN": "arn:aws:cloudtrail:us-east-1:511912822958:trail/cloudtrail-myTrail-X85D48OAI8Q4",
"LogFileValidationEnabled": true,
"IsMultiRegionTrail": true,
"HasCustomEventSelectors": false,
"S3BucketName": "cloudtrail-s3bucket-ce4vw655vhku",
"HomeRegion": "us-east-1" ...Read now
Unlock full access