Профиль организатора
Астрология ,
Авто и мото ,
Искусство
#худеем
Engineers can use rootsh, screen, or another utility to log user activity but if the user permissions are not set correctly, a skilled user can erase audit logs to cover their tracks. Another option would be to set up logging at the kernel level, but the expertise needed for that isn’t so common.
Thankfully, there’s a way to log user activity without writing even a single Linux command! We’ll need these services:
- EC2
- IAM (Identity and Access Management)
- KMS (Key Management Service)
- CloudWatch Logs (and/or S3)
- AWS Systems Manager (formerly known as SSM)
Let’s see how to set up each of them.