New Training: Processing AWS CloudTrail Events with Serverless PowerShell

In this 7-video skill, CBT Nuggets trainer Trevor Sullivan explores mechanisms used to manage AWS CloudTrail data using a serverless approach. Watch this new DevOps training.

Learn DevOps with one of these courses:

• AWS Cloud Automation with Powershell

• AWS Cloud Automation

This training includes:

• 7 videos

• 1.1 hours of training

You’ll learn these topics in this skill:

• Serverless Approaches for Processing CloudTrail Audit Logs

• Configure AWS CloudTrail PowerShell Development Tools

• Configure AWS Lambda IAM Execution Role and SNS Integration

• Implement Amazon S3 Data Retrieval Logic for AWS Lambda Function

• Iterate Over S3 Object Keys in AWS CloudTrail Event Data

• Summarize AWS CloudTrail Records in Lambda Function

• Final AWS Lambda Function Testing and Review

How to Pull CloudTrail Trail Settings with PowerShell

AWS CloudTrail is a great tool for managing the governance, compliance, and auditing of AWS resources. AWS Cloudtrail works by collecting a variety of data as it is configured in a CloudTrail account. Depending on how an organization wants to use that data, they may want to process it in a serverless environment. Because of this, developers can use the AWS SDK to interact with CloudTrail to pull data and interact with it as needed in a command-line environment.

PowerShell is a good option for a shell environment for working with AWS resources like CloudTrail. That's because PowerShell is capable of treating data as objects instead of generic strings. Since most AWS SDK calls require some form of data object, PowerShell is a good scripting language choice.

The AWS SDK can be integrated with PowerShell natively by using the AWS Tools for PowerShell package provided by Amazon. This package provides a variety of cmdlets for interacting with AWS resources.

For instance, developers will need to pull CloudTrail information for working with it. A useful cmdlet for this operation is the Get-CTTrail cmdlet. This command makes a call to the CloudTrail DescribeTrails API and receives settings for one or more Trails.