AWS Updates CloudTrail Lake
AWS has introduced new features and updates to AWS CloudTrail Lake to improve efficiency of operational investigations, enhance collaboration, and simplify analysis of AWS account activity.
AWS CloudTrail Lake is “a managed data lake you can use to aggregate, immutably store, and query events recorded by AWS CloudTrail for auditing, security investigation, and operational troubleshooting,” explains Esra Kayabali in the announcement.
The latest updates include:
- Enhanced filtering options for CloudTrail events.
- Cross-account sharing of event data stores.
- General availability of AI-powered natural language query generation.
- AI-powered query results summarization capability (in preview).
- Comprehensive dashboard capabilities.
These new features represent “a major advancement in providing a comprehensive audit logging and analysis solution,” Kayabali says, helping users conduct investigations more quickly and gain profound understanding across AWS environments.
Learn more at AWS.
03/03/2025
Related content
- Canonical Now Offers an Ubuntu Pro Image for AWS
-
Exploiting, detecting, and correcting IAM security misconfigurations
Three IAM security misconfiguration scenarios are rather common: allowing the creation of a new policy version, the modification of a role trust policy, and the creation of EC2 instances with role passing. We look at ways to avoid and detect IAM security holes. -
Cloud security with AWS GuardDuty
AWS GuardDuty uses machine learning and threat intelligence to identify malicious activity for continuous security monitoring in the cloud. -
Build a secure development and production pipeline
We investigate best practices to secure CI/CD pipelines with DevSecOps. -
Shadow admin permissions and your AWS account
Malicious attackers are trying to conquer your AWS castle in the cloud. To mount a strong defense, you'll need a deeper understanding of privilege escalation and shadow admin permissions.