The Amazon dashboards are covering the following categories.

• AWS cloud trail log activity

  • Each widget details a specific log type to be reported on, such as

    • Cloud Trail Log Activity -

    • Event by name

    • SRC ADDR the source address of the activity either FQDN or IP as provided in the event

    • User Name - the user that triggered the event

    • User type - the user role and type

    • User agent -

    • Lambda Cold Start Events by Username -

    • Customer Allocated IP Address Reports -

    • Events using Stolen Lambda Credentials -

  • Some examples of the dashboards for this area is below.

  •