AWS Cloud Operations Blog

Category: Management Tools

Announcing AWS Config Compliance Scores for conformance pack

Back in November 2019, we announced AWS Config Conformance Packs, which is a collection of AWS Config rules and remediation actions that can be easily deployed as a single entity in an account and a region or across an organization in AWS Organizations. Conformance Packs have helped AWS customers to manage and enforce compliance of […]

Copy existing AWS CloudTrail trails events to a AWS CloudTrail Lake event data store

AWS announced the general availability of AWS CloudTrail Lake on 5th Jan 2022, a managed audit and security lake that lets you aggregate, immutably store, and query activity logs for auditing, security investigation, and operational troubleshooting. Since launch, customers have adopted this feature, and it’s an integral part of customer operational and security operational processes. […]

How to get a daily report for your resources configuration changes

AWS allows customers to build, experience, and innovate in their AWS accounts, resulting in dynamic environments. You can manage your resources changes using different controls, such as: Preventive controls with AWS Identity and Access Management (IAM) policies Detective controls with AWS Config Rules Preventive and Detective controls with continuous integration and continuous delivery (CI/CD) pipelines […]

Migrating AIX workloads to AWS: How to get started

Customers are asking us how to migrate their AIX workloads to Amazon Web Services (AWS).  Customers have questions regarding assessing the current AIX portfolio, estimating the total cost of ownership (TCO) on AWS, and guidance in determining migration patterns and target state architectures for specific workloads.  To accelerate your AIX migrations to the cloud you’ll […]

AWS Control Tower releases API, pre-defined controls to your organizational units

AWS Control Tower offers a direct way to set up and govern an AWS multi-account environment following prescriptive guidance and best practices. It orchestrates the capabilities of several other AWS services, including AWS Organizations, AWS Service Catalog, and AWS IAM Identity Center (successor to AWS Single Sign-On), to build a landing zone in less than […]

Prepare for an Audit in AWS Part 2 – General Best Practices

In Part 1 of this blog series, I discussed how you can use purpose-built services, such as AWS Audit Manager, AWS Config, and AWS Artifact, to help with almost any audit that you may be preparing for, with features geared specifically to what is required by an audit. But the story shouldn’t start there. Instead, […]

How Kyndryl used AWS Service Management Connector, AWS Config and AWS Systems Manager to achieve lifecycle management of AWS resources through ServiceNow

Customers need a way to do lifecycle management of AWS resources in the AWS Cloud. Many customers leverage managed solutions providers to manage their AWS accounts, and they’re looking for AWS native solutions and integrations to solve their business problems. Lifecycle management includes discovering new resources from customer’s AWS environment, populating them via federation into […]

How Arctic Wolf uses AWS CloudTrail Lake to Simplify Security and Operations

In this post, we’ll discuss how Arctic Wolf is using AWS CloudTrail Lake to simplify compliance, enhance security operations, and obtain new operational insights from their CloudTrail data. Arctic Wolf, the leader in security operations, helps customers protect their organizations from rapidly evolving cyber threats with the Arctic Wolf Security Operations Cloud and Concierge Security® model. As […]

Introducing vended logs for Amazon Managed Service for Prometheus

Customers are using Amazon Managed Service for Prometheus to monitor and alert on their container metrics. Amazon Managed Service for Prometheus ships with Alert Manager, the open source alert routing component in Prometheus. Alert manager routes alerts to Amazon Simple Notification Service (Amazon SNS). However, there are some common reasons why alert manager may fail […]