DevOps Articles

Monitoring AWS IAM Security Alerts: Cloud Trail & EventBridge Rules

Security of your AWS IAM resources is at most important an monitoring it and getting alerts for critical action performed on your IAM resources is must required for DevSecOps process. If you are being struggling to write some alerts on IAM monitoring by using Cloud Watch Event rule which will trigger the lambda function.

If you are trying to write the custom event rule in other aws region your lambda won’t get trigger. IAM Monitoring Alerts Implemented:Design:Precondition: You can refer the link to create a topic and subscribe: Note: Make sure once you create a topic you need to confirm the subscription so that you can receive email when a message is publish to that topic.

Test your Setup: You will get the email alert to email-id to which your sns topic is subscribed.