AWS Cloud Operations Blog

Category: Advanced (300)

Analyze Azure Audit Logs with CloudTrail Lake

Analyze Azure Audit Logs with CloudTrail Lake

Introduction In the ever-evolving world of cloud computing, maintaining robust security and compliance is paramount. As usage of multicloud environments grows, the need for comprehensive monitoring and logging solutions becomes more critical. Enter the synergy of Azure Audit Logs and AWS CloudTrail Lake—a powerful combination that provides comprehensive visibility across your cloud environments. Azure Audit […]

Monitor AWS Transit Gateway Flow Logs centrally using HAQM Managed Grafana

Monitor AWS Transit Gateway Flow Logs centrally using HAQM Managed Grafana

As organizations continue to expand their cloud infrastructure by connecting multiple HAQM Virtual Private Clouds (HAQM VPC) across accounts and regions, the complexity of managing their network environment increases. AWS Transit Gateway has emerged as a powerful solution to simplify this complexity by providing a centralized hub for secure communication between HAQM VPCs, on-premises systems, and […]

Increase SAP workloads scalability and resiliency with AWS native Application Load Balancer

In the evolving landscape of SAP systems, the transition to web-based access via SAP FIORI has necessitated robust load balancing solutions. Traditionally, end-users accessed SAP systems using the SAP GUI installed on their PC/laptop. However, critical transactions are now increasingly processed through web browsers. For scenarios like SAP HR time entry, these transactions might also […]

Manage third party applications in Windows Server nodes using AWS System Manager and Chocolatey

System Administrators face a never-ending list of tasks in IT organizations, with one of the most critical being the installation and updating of software packages. This process is essential for maintaining a secure posture across systems. However, as the number of servers grows, manually managing updates becomes increasingly time-consuming and inefficient. The challenge we’re addressing […]

Authorize different sets of interactive session commands for users using SSM documents

Limit interactive session commands by groups of users using AWS Systems Manager

Customers are looking for a way to limit the types of commands that can be run on their HAQM Elastic Compute Cloud (HAQM EC2) instances when using AWS Systems Manager Session Manager interactive sessions. Allowed commands vary by group, meaning you need to allow different sets of commands based on the group of users. For […]

Implementing recommended experiments using AWS Resilience Hub APIs

HAQM Web Services (AWS) is excited to introduce an enhanced integration between AWS Resilience Hub and AWS Fault Injection Service that streamlines the process of creating and running chaos experiments. We’ll focuses on how to leverage this integration through the AWS Command Line Interface (AWS CLI), catering to users who prefer command-line tools for automation […]

Automate Systems Manager patching reports via email and Slack notifications in an AWS Organization

An effective patch management is foremost for maintaining system security, reliability, and compliance across your IT infrastructure. AWS Systems Manager (SSM) provides a comprehensive patching solution, enabling you to automate the deployment of operating system updates to your nodes deployed on AWS, on-premises, and multicloud environments. However, as your organization scales, tracking and reporting on […]

AWS Organizations, moving an organization member account to another organization: Part 1

December 24, 2024: This post was republished to update terminology for AWS RAM resource shares and to update links. AWS customers use AWS Organizations as the basis of a multi-account AWS environment as defined by the Organizing Your AWS Environment Using Multiple Accounts AWS Whitepaper. Organizations is an AWS service that enables you to centrally […]

Troubleshooting AWS Systems Manager patching made easy with HAQM Bedrock’s automated recommendations

Keeping your AWS infrastructure up-to-date and secure is a critical part of maintaining a robust and reliable cloud environment. AWS Systems Manager’s patching capabilities are a powerful tool in this effort, allowing you to automatically apply the latest security updates and bug fixes to your managed nodes, including HAQM Elastic Compute Cloud (EC2) instances, on-premises […]

How to detect and monitor HAQM Simple Storage Service (S3) access with AWS CloudTrail and HAQM CloudWatch

How to detect and monitor HAQM Simple Storage Service (S3) access with AWS CloudTrail and HAQM CloudWatch

While protection of data is critical, equally important is observing who accesses it.  AWS services allow you to control your data by determining where it’s stored, who has access, and how it’s secured. AWS CloudTrail provides an effective way to track data access activities.  You can detect access attempts, and identify potential unauthorized attempts. CloudTrail, […]