CloudTrail

Question 1

What is CloudTrail?

Answer 1

CloudTrail logs API and Console actions that impact AWS accounts, providing account traceability.

Question 2

How long are CloudTrail logs stored by default?

Answer 2

90 days. This is enabled by default and is free. If you want data from more than 90 days ago, or you want data to be stored outside of CloudTrail, you must create a trail.

Question 3

How resilient is CloudTrail?

Answer 3

CloudTrail is region resilient. It is a regional service.

Question 4

Where do Global Services log their events?

Answer 4

The us-east-1 region.

Question 5

What are the default enabled/disabled states for Mangement Event and Data Event logging in CloudTrail?

Answer 5

Management Events: Enabled.

Data Events: Disabled.

Question 6

Where are CloudTrail trails stored?

Answer 6

S3 or CloudWatch.

Question 7

Is CloudTrail a realtime service?

Answer 7

No. There is a delay in logging data.