AWS Cloud Operations Blog

Tag: Amazon S3

How to detect and monitor Amazon Simple Storage Service (S3) access with AWS CloudTrail and Amazon CloudWatch

How to detect and monitor Amazon Simple Storage Service (S3) access with AWS CloudTrail and Amazon CloudWatch

While protection of data is critical, equally important is observing who accesses it.  AWS services allow you to control your data by determining where it’s stored, who has access, and how it’s secured. AWS CloudTrail provides an effective way to track data access activities.  You can detect access attempts, and identify potential unauthorized attempts. CloudTrail, […]

Detect and respond to security threats in near real-time using Amazon Managed Grafana

Security is “job zero” at AWS. It’s crucial to gain deeper insights into your AWS infrastructure’s security posture to respond quickly to threats. The ability to centrally monitor and visualize the security findings make it easier for you to identify any security threats or gaps and also keep the principle of least privilege in focus. […]

Optimize your cloud deployments with Prioritized Trusted Advisor recommendations in your operational workflows

AWS Trusted Advisor Priority helps you focus on the most important recommendations for optimizing your cloud deployments, improving resilience, and addressing security gaps. As an AWS Enterprise Support customer, you gain access to prioritized and context-driven recommendations, curated both by your AWS account team and machine-generated checks from AWS services. Note: AWS Trusted Advisor Priority […]

Enabling Self Service for Cloud Custodian policies on AWS using AWS Service Catalog

Customers are increasingly seeking tools and solutions that can help them achieve their desired outcomes more efficiently and effectively. In the context of cloud management, the need for self-service capabilities has become more pronounced as organizations strive to optimize their cloud resources, improve security, and enhance their overall cloud operations. AWS Service Catalog offers the […]

Using Lambda-backed Custom Resources to Reduce Overhead in a Multi-Account Environment

Using Lambda-backed Custom Resources to Reduce Overhead in a Multi-Account Environment

Introduction Many of my customers use AWS CloudFormation to streamline provisioning operations for AWS and third-party resources, that they describe with code in JSON- or YAML-formatted CloudFormation templates. Some workloads require custom logic or inputs beyond standard parameter values. For these scenarios, an often overlooked and useful CloudFormation feature lies in AWS Lambda-backed custom resources. With Lambda-backed custom […]

Simplify analysis of AWS CloudTrail data leveraging Amazon CloudWatch machine learning and advanced capabilities

AWS CloudTrail tracks user and API activities across AWS environments for governance and auditing purposes and allows customers to centralize a record of these activities. Customers have the option to send AWS CloudTrail logs to Amazon CloudWatch that simplifies and streamlines the analysis and monitoring of AWS CloudTrail recorded activities. Amazon CloudWatch anomaly detection allows […]

A detailed overview of Trusted Advisor Organizational Dashboard

As your business grows on Amazon Web Services (AWS), so too does the need to ensure your resources are optimized and following AWS best practices. AWS Trusted Advisor identifies ways to improve your AWS infrastructure across 5 unique pillars: Security, Performance, Cost Optimization, Fault Tolerance, and AWS Service Quotas. The AWS Support API allows customers […]

Choose, create, and track your unit metrics for your applications

When you operate in the variable spend model of the Cloud, business growth can translate into a variable bill that reflects the activity of your workloads in your environment. For some customers, a monthly increase in their AWS bill is a normal part of growth, but for many, is an unwanted outcome. Therefore, it is […]

AWS Service Catalog Account Factory-Enhanced

Many enterprise customers who use AWS Control Tower to create accounts want an uncomplicated way to extend the next steps in the account creation process. These next steps cover common business use cases, including creating networks, security profiles, governance, and compliance. Executing these processes for every new account created manually is cumbersome and challenging to […]

Create speech-enabled products using AWS Service Catalog and Amazon Polly

In this post, we’ll show how enterprises can use AWS Service Catalog to create AWS Service Catalog products based on AWS machine learning (ML) services, such as Amazon Polly and Amazon Rekognition. These products are packaged in AWS Service Catalog portfolios that customers can use for their use cases. These portfolios can generate revenue for […]