The following table describes the logs, and log location, for the AMS Shared Services in your account.
To access your logs, ensure that you have one of the required IAM roles and are in your AMS account. Then navigate to the directory shown.
| Shared service name | Log details | Log location | |
|---|---|---|---|
1 |
Bastion Hosts |
Information regarding users accessing the bastion host. |
Linux Bastions: CloudWatch Logs: /{instance id}/var/log/secure CloudWatch Logs: /{instance id}/var/log/audit/audit.log Windows Bastions: CloudWatch Logs: /{instance id}/SecurityEventLog |
2 |
Management Hosts |
Output of scripts, which assist in automated access management actions within the account. |
CloudWatch Logs: /{instance id}/ApplicationEventLog |
4 |
EPS Hosts (DSM) |
Information regarding the enrollment of instances onto the Deep Security Management platform. |
CloudWatch Logs: /{instance id}/var/log/DSM.log |
5 |
Directory Services |
Information regarding account login, account management, detailed tracking, object access, policy change, and privilege use within the account’s directory. You must explicitly enable Directory Services logging. For information, see Enabling logging for supported services. |
CloudWatch Logs: /aws/directoryservice/{directory id}-{directory dns name} |
6 |
Lambdas |
Output of various lambdas, which assist in automated operational actions within the account. |
CloudWatch Logs: /aws/lambda/{lambda name} |
| Shared service name | Log details | Log location | |
|---|---|---|---|
1 |
Bastions |
Output of instance logins and authentication failures. |
Linux Bastions CloudWatch Logs: /{ Windows Bastions CloudWatch Logs: /{ |
2 |
Management Hosts |
Output of scriptsy, which assist in automated access management actions within the account. |
CloudWatch Logs: /{ |
3 |
EPS Hosts (DSM) |
Information regarding the enrollment of instances onto the Deep Security Management platform. |
CloudWatch Logs: /{ |
4 |
Directory Services |
Information regarding account login, account management, detailed tracking, object access, policy change, and privilege use within the account’s directory. You must explicitly enable Directory Services logging. For information, see Enabling logging for supported services. |
CloudWatch Logs: /aws/directoryservice/{ |
5 |
Lambdas |
Output of various lambdas, which assist in automated operational actions within the account. |
CloudWatch Logs: /aws/lambda/{ |
