New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, you will ensure that administrative staff is notified if the security policy on a bucket is changed.
Create an S3 bucket for these secure resources
Configure CloudTrail to log security-sensitive changes to your environment
Configure the CloudWatch service to detect S3 bucket policy changes in those logs, and to create an alarm when a changed policy is detected
Test that configuration by making a change to the policy for your S3 bucket
Note: Once you begin the lab, you will not be able to pause, save, or return to your lab. Please ensure that you have set aside enough time to complete the lab before you start.
