In this section, we will look at the two main logging and security monitoring services on AWS, along with bypasses for each of them to enable them to stay under the radar. This section will also cover secure configurations for these services.

The following chapters will be covered in this section: 

• Chapter 15, Pentesting CloudTrail
• Chapter 16, GuardDuty