Posted On: Jun 8, 2021

Amazon FSx for Windows File Server now supports auditing end-user access to files, folders, and file shares. You can publish logs to Amazon CloudWatch Logs or stream logs to Amazon Kinesis Data Firehose, enabling you to query, process, store, and archive logs and trigger actions to further advance your security and compliance goals.

Amazon FSx for Windows File Server provides fully managed, highly reliable file storage built on Windows Server and accessible via the industry-standard Server Message Block (SMB) protocol. With this launch, you can enable auditing of end-user access to files, folders, and file shares with a few clicks on the Amazon FSx Console. You can define for individual files and folders which operations (for example, create, delete, read, or write) are audited. You can view and query audit logs on CloudWatch Logs, archive logs in Amazon S3, trigger AWS Lambda functions to take reactive actions, or perform post-processing on AWS Partner solutions such as Splunk and Datadog.

Starting today, file access auditing is available at no additional cost for all new file systems in all regions where Amazon FSx is available. Learn more about these features in our AWS News blog, and the Amazon FSx documentation.