ConceptsCloud Audit Log

Cloud Audit Log

A cloud platform's record of control-plane activity, who called which API, on what resource, when, and from where. It is the foundational telemetry for detecting, investigating, and auditing actions in a cloud environment.

Glossary definition

11 direct links7 lessons

Concept Neighborhood

Prerequisite · arrow shows the orderRelated · bigger circles cover more lessons

Start here

Detection engineering

The most substantial related concept here, covered by 16 lessons.

Open concept →

Builds towardCloud Audit Log is a foundation for these

Cloud Incident Response

Responding to security incidents in cloud environments, adapting the incident response lifecycle to cloud realities like identity-centric attacks, ephemeral resources, control-plane evidence, and the shared-responsibility model.

lesson

Relatedsorted by lesson coverage

Detection engineeringStart here

lessons

Flow Data

lessons

Identity Telemetry

lessons

Log Integrity

lessons

Logs

lessons

Data Lakes

lessons

Show 4 more connections

Hot vs Cold Storage

lessons

Event IDs

lessons

Cloud SIEM

lesson

Logging Disabled

lesson

Related Lessons

7 lessons cover this concept

Detect and Respond in Cloud Environments

General Beginner

Design Security Telemetry

General Beginner

Build Reliable Source Coverage

General Beginner

Protect the Telemetry Pipeline

General Beginner

Store, Query, and Govern Telemetry

General Beginner

Make Telemetry Detection-Ready

General Beginner

Operate and Improve Telemetry

General Beginner