Record · corpus.blog/posts/01a08783-2996-72ba-a876-ac5420452d33

Centralized Logging and Audit Architecture on AWS - Multi-Account Log Aggregation, Detection, and Query with CloudTrail, Config, Security Hub, and OpenSearch | hidekazu-konishi.com

hidekazu-konishi.com · published 18 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hidekazu-konishi.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 19
Words captured: 8,707

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://docs.aws.amazon.com/prescriptive-guidance/latest/security-reference-architecture/introduction.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html

docs.aws.amazon.com

https://aws.amazon.com/s3/pricing/

aws.amazon.com

https://docs.aws.amazon.com/athena/latest/ug/cloudtrail-logs.html

docs.aws.amazon.com

https://docs.aws.amazon.com/opensearch-service/latest/developerguide/what-is.html

docs.aws.amazon.com

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake.html

docs.aws.amazon.com

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/creating-trail-organization.html

docs.aws.amazon.com

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-delegated-administrator.html

docs.aws.amazon.com

https://docs.aws.amazon.com/config/latest/developerguide/aggregated-create.html

docs.aws.amazon.com

https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-config.html

docs.aws.amazon.com

https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub-v2.html

docs.aws.amazon.com

https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html

docs.aws.amazon.com

https://docs.aws.amazon.com/securityhub/latest/userguide/exposure-findings.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_accounts.html

docs.aws.amazon.com

https://docs.aws.amazon.com/guardduty/latest/ug/set-guardduty-auto-enable-preferences.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock-configure.html

docs.aws.amazon.com

https://docs.aws.amazon.com/prescriptive-guidance/latest/security-reference-architecture/log-archive.html

docs.aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2025/12/security-hub-near-real-time-risk-analytics/

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2026/05/aws-security-hub-unused-access/

aws.amazon.com

Elsewhere on hidekazu-konishi.com (13)

AWS Multi-Account Operational Patterns - Control Tower, Organizations, SCPs | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Where the Logs Come From on AWS - Identity and the Control Plane, What Is On by Default, and What Is Not Recorded at All | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS History and Timeline regarding AWS CloudTrail - Overview, Functions, Features, Summary of Updates, and Introduction | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Where the Logs Come From on AWS - The Network, What Each Source Actually Records, and Which Traffic Never Appears in Any of Them | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

IAM Policy Evaluation Logic Step-by-Step - Explicit Deny, RCP, SCP, Resource Policy, Identity Policy, Permission Boundary, and Session Policy | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS IAM Glossary - Principal, Permission Boundary, SCP, RCP, ABAC, and Cedar Explained | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Detection Engineering on AWS - What a Custom Source Must Satisfy Before a Detection Can Be Written, and What the Detection Still Does Not See | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Object Lock, Legal Holds, and Event Holds in Amazon S3 - Who Can Shorten a Retention Period, What a Hold Adds, and When the Retention Clock Starts | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Tagging Strategy: Complete Guide for Operations, Automation, and Security | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

CloudWatch Logs Insights Query Cookbook: Practical Recipes for Incident Investigation, Cost Analysis, and Security Audits | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Zero-Trust Network Architecture Guide - Segmentation, Inspection, and Identity-Aware Access with VPC, Network Firewall, VPC Lattice, and Verified Access | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Observability Architecture Guide - End-to-End Tracing, Metrics, and Logs with CloudWatch, X-Ray, Application Signals, and OpenTelemetry | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS History and Timeline regarding Amazon Athena - Overview, Functions, Features, Summary of Updates, and Introduction | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com