Posted On: Jun 8, 2021

HAQM FSx for Windows File Server now supports auditing end-user access to files, folders, and file shares. You can publish logs to HAQM CloudWatch Logs or stream logs to HAQM Kinesis Data Firehose, enabling you to query, process, store, and archive logs and trigger actions to further advance your security and compliance goals.

HAQM FSx for Windows File Server provides fully managed, highly reliable file storage built on Windows Server and accessible via the industry-standard Server Message Block (SMB) protocol. With this launch, you can enable auditing of end-user access to files, folders, and file shares with a few clicks on the HAQM FSx Console. You can define for individual files and folders which operations (for example, create, delete, read, or write) are audited. You can view and query audit logs on CloudWatch Logs, archive logs in HAQM S3, trigger AWS Lambda functions to take reactive actions, or perform post-processing on AWS Partner solutions such as Splunk and Datadog.

Starting today, file access auditing is available at no additional cost for all new file systems in all regions where HAQM FSx is available. Learn more about these features in our AWS News blog, and the HAQM FSx documentation.