More about CloudTrail
Although CloudTrail is meant to be the central logging source for an AWS account, the way that it is built leaves some undesirable risks out in the open as new AWS services are being developed. The team working at AWS that is creating a new service must create the CloudTrail integration with their service to allow its API calls to be logged to CloudTrail. Also, because of how fast AWS pushes out new services and functionality, there are many services that get released without any support for CloudTrail. That list can be found here: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-unsupported-aws-services.html. Later in this chapter, we will dive into abusing unsupported services for our advantage ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access