- Neueste
- Die meisten Stimmen
- Die meisten Kommentare
You can either use Cloudtrail or CloudWatch to monitor you secrets: https://docs.aws.amazon.com/secretsmanager/latest/userguide/monitoring.html
What logs do you need from AWS Secrets Manager?
For example, API event history as output to CloudTrail?
From the following documentation, I don't think there is any setting that outputs directly to CloudWatch Logs.
Therefore, in some cases, it may be necessary to create a function that uses Lambda or other means to retrieve events from CloudTrail and send them to CloudWatch Logs.
https://docs.aws.amazon.com/secretsmanager/latest/userguide/monitoring.html
Alternatively, all API events recorded in CloudTrail can be linked to CloudWatch Logs.
https://docs.aws.amazon.com/awscloudtrail/latest/userguide/send-cloudtrail-events-to-cloudwatch-logs.html
- Open the AWS Secrets Manager console.
- Select the Secrets Manager secret for which you want to configure logging.
- Under the "Secret details" section, click on the "Edit" button.
- Scroll down to the "Logging" section.
- Enable the "Enable automatic rotation and log rotation" option if it is not already enabled. This ensures that the secret's logs are generated.
- Select the CloudWatch log group where you want the logs to be sent. You can choose an existing log group or create a new one. If you choose to create a new log group, provide a name for it
- Click the "Save" button to save the changes.
Relevanter Inhalt
- AWS OFFICIALAktualisiert vor 2 Jahren
- AWS OFFICIALAktualisiert vor 2 Jahren
- AWS OFFICIALAktualisiert vor 2 Jahren
- AWS OFFICIALAktualisiert vor einem Jahr