Previous logs discussed
So far, we have mainly been discussing logs that are generated from the application itself. Also included in some of those earlier exercises with CloudWatch Logs were some logs that AWS gives us as wrappers around those logs; however, these are still, for the most part, just application and AWS service logs.
When we want to understand how users are interacting with our environment, be it our network environment or how they are adding and removing resources within our account, then we would not be able to find that information in the application logs. Instead, we must look at some of the other logs available in AWS.
Knowing which logs to use for which purpose can also help us when it comes to other services to protect our environment, such as GuardDuty.
Note
We will discuss GuardDuty in Chapter 22, Other Policy and Standards Services to Know About.
Now that we've looked at where we have been and where we are going, let's start with...