A must-have tool-kit for cloud auditing and monitoring
Use Cases and Deployment Scope
Mainly we're using it for an audit trail of all actions done in AWS CloudTrail and for user activity of course. Moreover, our Dev-Ops were using it to debug AWS services, especially understanding what and why went wrong during the AWS CloudTrail setup or changes. The scope is mainly audit/logging of API calls and monitoring, mainly detecting unusual or suspicious activities.
Pros
- API Log
- User activity tracking
- Real-time alerts
Cons
- UI/UX is not the easiest and greatest
- Advanced filtering (mainly logs overload)
- Not flexible alerting system
Likelihood to Recommend
Most probably it would be suitable for Finance industries, where security is at the head of the table. However, in our case for E-commerce, it's also quite suitable, since we have quite a significant amount of data and usage of AWS services. Especially with usage of AWS services, AWS CloudTrail comes into play as a heavy plus. For instance, troubleshooting any issues in AWS services is really nice.
Therefore, it would be less appropriate with a small amount of AWS service usage and some basic web hosting.