Logging to CloudTrail
Logging to CloudTrail
Access AWS Management Console
- Find S3
- Select S3
In the S3 interface
- Select Buckets
- Select General purpose buckets
- Select
kms-key-s3-<account-id>-<region>-an
- Next, select the cloudtrail/ folder
Next step
- Follow the path and you will see that there are no logs recorded in the cloudtrail/ folder yet
Go back to
kms-key-s3-<account-id>-<region>-an- Select Upload
In the Upload section
- Select Add files
- Select the File downloaded in section 4.2
- Press Open
Next step
- Select Properties
Scroll down to the Server-side encryption section
- Server-side encryption select Specify an encryption key
- Encryption settings select Override bucket settings for default encryption
- Encryption type select Server-side encryption with AWS Key Management Service keys (SSE-KMS)
- AWS KMS key select Choose from your AWS KMS keys
Scroll down to the Available AWS KMS keys section
- Select kms-key-encrypt-decrypt
- Scroll down and press Upload
- Notification of successful upload
- Go back and select the cloudtrail/ folder
- Follow the path and you will see that the log has been recorded in the cloudtrail/ folder
The folder path is created automatically based on the event date. For example, if the upload happens on a specific year, month, and day, CloudTrail creates the corresponding year/month/day folder structure.
