CODEWITHSUNDEEP
amazon-web-servicesamazon-iam
MNWA
MNWA

Reputation: 131

AWS IAM authentication logs

I am looking for authentication activities in the AWS IAM logs; I collected all the logs for this purpose, however, I am not able to locate any logs indicating authentication. I wonder if someone could help me with the search parameters. Also, I checked the API references here (http://docs.aws.amazon.com/IAM/latest/APIReference/Welcome.html); however, I did not see any API which indicates authentication activities. Any help would be highly appreciated.

Thanks!

Upvotes: 0

Views: 387

Answers (3)

Thando Toto
Thando Toto

Reputation: 401

CloudTrail records authentication activities for both successful and unsuccessful login. The link below should have all the details you need regarding log details:

IAM Authentication Log example Logging IAM

Upvotes: 0

drsromero
drsromero

Reputation: 311

You should enable CloudTrail for monitoring API call https://aws.amazon.com/es/cloudtrail/

Upvotes: 0

John Rotenstein
John Rotenstein

Reputation: 269400

Amazon CloudTrail can capture login attempts to the AWS Management Console.

All other types of authentication happen with the actual API calls. For example, if an Amazon EC2 StopInstance API call is made to AWS, the credentials are checked, permissions are checked to confirm that the credentials are permitted to make such a call, then the action is performed. Once again, Amazon CloudTrail keeps an audit trail of this API request and whether it was successful.

The authentication takes place with every API call, rather than authenticating first, then making API calls.

Upvotes: 1

Related Questions