SSH Communications Security's CryptoAuditor is a network-based virtual appliance that has the capability to control, monitor and audit encrypted administrator sessions, as well as file transfers. Because CryptoAuditor requires no agents to be deployed or specific access portal to go through, it is fast to implement and has no impact on end-user experience or workflows - it works regardless of what devices users connect with and what they connect to.
CryptoAuditor creates an audit trail of encrypted traffic running through SSH, SFTP, RDP and HTTPS with indexed logging and provides means of enforcing identity-based policy controls over AWS EC2 cloud deployments.