--- title: "#cloudtrail articles | Hashnode" description: "Explore 42 articles tagged #cloudtrail on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/cloudtrail" --- Tag # #cloudtrail 42 posts · 4 followers [Robin Sishodia](https://hashnode.com/@Sishodia) · [3d ago](https://hashnode.com/posts/aws-cloudtrail-basics-who-did-what-when-and-from-where/6af0b6af043e2c262ec464bb) ### [AWS CloudTrail Basics: Who Did What, When and From Where](https://sishodiarobin.hashnode.dev/aws-cloudtrail-basics-who-did-what-when-and-from-where?utm_source=hashnode&utm_medium=feed) This week I locked the root account and set a budget. Now the question that comes after both: when something changes in the account, how do I find out who did it, what they did and when? That is AWS C 3 min read · [sishodiarobin.hashnode.dev](https://sishodiarobin.hashnode.dev/aws-cloudtrail-basics-who-did-what-when-and-from-where?utm_source=hashnode&utm_medium=feed) [Jayesh Sojitra](https://hashnode.com/@jayeshsojitra) · [Oct 19](https://hashnode.com/posts/cloudtrail-explained-knowing-what-actually-happened/6ad5ba8faae187351c18e304) ### [CloudTrail Explained: Knowing What Actually Happened](https://jayesh-sojitra.hashnode.dev/cloudtrail-explained-knowing-what-actually-happened?utm_source=hashnode&utm_medium=feed) When something changes in your AWS account and nobody admits to touching it, CloudTrail is how you find out who did what, and when. The catch is that it only helps if you set it up before you need it. 4 min read · [jayesh-sojitra.hashnode.dev](https://jayesh-sojitra.hashnode.dev/cloudtrail-explained-knowing-what-actually-happened?utm_source=hashnode&utm_medium=feed) [Sammed Chougule](https://hashnode.com/@SammedC) · [Jul 6](https://hashnode.com/posts/protecting-and-observing-aws-architectures-waf-shield-secrets-and-monitoring/6a4bc93c7a9478801ea0d71a) ### [Protecting and Observing AWS Architectures: WAF, Shield, Secrets, and Monitoring](https://aws-saa-journey.hashnode.dev/protecting-and-observing-aws-architectures-waf-shield-secrets-and-monitoring?utm_source=hashnode&utm_medium=feed) SAA-C03 Series — Week 7 16 min read · [aws-saa-journey.hashnode.dev](https://aws-saa-journey.hashnode.dev/protecting-and-observing-aws-architectures-waf-shield-secrets-and-monitoring?utm_source=hashnode&utm_medium=feed) [Sesank Munukutla (Naga)](https://hashnode.com/@nagasesank) · [Feb 9](https://hashnode.com/posts/project-6-implementing-just-in-time-jit-ssh-access-for-ec2-on-aws/698a3049ded87eaed755f8e4) ### [🔐 Project 6: Implementing Just-In-Time (JIT) SSH Access for EC2 on AWS](https://fridaysecurity.hashnode.dev/project-6-implementing-just-in-time-jit-ssh-access-for-ec2-on-aws?utm_source=hashnode&utm_medium=feed) Time-bound access, automatic revocation, and full auditability Why This Project Exists Permanent SSH access to EC2 instances is one of the most common and dangerous cloud misconfigurations.Open port 22, long-lived keys, and forgotten security group r... 3 min read · [fridaysecurity.hashnode.dev](https://fridaysecurity.hashnode.dev/project-6-implementing-just-in-time-jit-ssh-access-for-ec2-on-aws?utm_source=hashnode&utm_medium=feed) [Sesank Munukutla (Naga)](https://hashnode.com/@nagasesank) · [Feb 1](https://hashnode.com/posts/project-5-zero-trust-ec2-access-in-aws-using-iam-ssm-cloudtrail-and-guardduty/697f810f634c7aaada25c771) ### [🔐 Project 5: Zero-Trust EC2 Access in AWS Using IAM, SSM, CloudTrail, and GuardDuty](https://fridaysecurity.hashnode.dev/project-5-zero-trust-ec2-access-in-aws-using-iam-ssm-cloudtrail-and-guardduty?utm_source=hashnode&utm_medium=feed) Introduction SSH has been the default way to access Linux servers for decades. In cloud environments like AWS, however, SSH introduces unnecessary risk: static keys, open network ports, weak identity attribution, and poor auditability at scale. In th... 5 min read · [fridaysecurity.hashnode.dev](https://fridaysecurity.hashnode.dev/project-5-zero-trust-ec2-access-in-aws-using-iam-ssm-cloudtrail-and-guardduty?utm_source=hashnode&utm_medium=feed) [Sesank Munukutla (Naga)](https://hashnode.com/@nagasesank) · [Jan 24](https://hashnode.com/posts/project-4-eliminating-ssh-with-aws-systems-manager-iam-controlled-auditable-ec2-access/69749b713e80940330e3bae6) ### [🔐 Project 4: Eliminating SSH with AWS Systems Manager — IAM-Controlled, Auditable EC2 Access](https://fridaysecurity.hashnode.dev/project-4-eliminating-ssh-with-aws-systems-manager-iam-controlled-auditable-ec2-access?utm_source=hashnode&utm_medium=feed) SSH-based access to cloud workloads remains common, but it introduces unnecessary attack surface: open inbound ports, long-lived credentials, key sprawl, and limited auditability. Modern AWS environments do not require SSH for interactive access to E... 4 min read · [fridaysecurity.hashnode.dev](https://fridaysecurity.hashnode.dev/project-4-eliminating-ssh-with-aws-systems-manager-iam-controlled-auditable-ec2-access?utm_source=hashnode&utm_medium=feed) [Danny Steenman](https://hashnode.com/@dannysteenman) · [Jan 25](https://hashnode.com/posts/aws-soc-2-compliance/69c4e52712065e762963a938) ### [AWS SOC 2 Compliance: What Auditors Actually Look For](https://towardsthecloud.hashnode.dev/aws-soc-2-compliance?utm_source=hashnode&utm_medium=feed) Learn what SOC 2 auditors expect from your AWS controls. Covers shared responsibility, required controls, evidence collection, common failures, and a 90-day readiness plan. 20 min read · [towardsthecloud.hashnode.dev](https://towardsthecloud.hashnode.dev/aws-soc-2-compliance?utm_source=hashnode&utm_medium=feed) [Danny Steenman](https://hashnode.com/@dannysteenman) · [Jan 22](https://hashnode.com/posts/aws-security-review-checklist/69c4e52fd18cc5a9a8e562ac) ### [AWS Security Review Checklist: Complete Self-Assessment Guide](https://towardsthecloud.hashnode.dev/aws-security-review-checklist?utm_source=hashnode&utm_medium=feed) The exact checklist we use for paid security reviews. 55+ items covering IAM, network, data, and logging with time estimates and remediation steps. 36 min read · [towardsthecloud.hashnode.dev](https://towardsthecloud.hashnode.dev/aws-security-review-checklist?utm_source=hashnode&utm_medium=feed) [Danny Steenman](https://hashnode.com/@dannysteenman) · [Jan 20](https://hashnode.com/posts/aws-security-best-practices/69c4e5375af36a58925ffbcf) ### [AWS Security Best Practices: The 20% That Prevents 80% of Breaches](https://towardsthecloud.hashnode.dev/aws-security-best-practices?utm_source=hashnode&utm_medium=feed) Stop implementing AWS security blindly. Learn the critical IAM, network, data, and monitoring practices that prevent most breaches, with specific configurations. 27 min read · [towardsthecloud.hashnode.dev](https://towardsthecloud.hashnode.dev/aws-security-best-practices?utm_source=hashnode&utm_medium=feed) [Navya A](https://hashnode.com/@NavyaDevops) · [Jan 7](https://hashnode.com/posts/aws-cloudwatch-vs-cloudtrail/695e3ed53067b248bc8f433b) ### [AWS CloudWatch vs CloudTrail](https://navyadevops.hashnode.dev/aws-cloudwatch-vs-cloudtrail?utm_source=hashnode&utm_medium=feed) AWS CloudWatch vs CloudTrail – Monitoring, Auditing, and Why They Matter If you operate workloads on AWS, visibility is everything. You need to know: Is my application healthy right now? Are users facing latency or errors? Who changed a security g... 4 min read · [navyadevops.hashnode.dev](https://navyadevops.hashnode.dev/aws-cloudwatch-vs-cloudtrail?utm_source=hashnode&utm_medium=feed)