Skip to content

Construct Overview

This Audit CDK L3 construct is used to configure deploy the resources required to define a secure S3-based bucket on AWS for use as a Cloudtrail or S3 Inventory target.

Deployed Resources

Audit

  • Audit KMS Key - This key will be used to encrypt all Audit resources which support encryption at rest (including the Audit S3 Bucket).
  • Audit S3 Buckets - An S3 bucket with policies configured to allow CloudTrail audit logs and S3 Inventories to be written.
  • Glue/Athena Audit Table - An Athena table will be created in order to query CloudTrail data in the Audit Bucket
  • Glue/Athena Inventory Table - An Athena table will be created in order to query S3 Inventory data in the Audit Bucket