News for hackers. Stuff that matters.

A comment on Rubygems.org AWS Root Access Event – September 2025. Parent comment

Re:Rubygems.org AWS Root Access Event – September 2025 by arianvanp on Thursday October 09, 2025 @04:14PM (#45532518)
You can't enable or disable AWS Cloud Trail as far I know?

You can enable the persistent storage of trails. But you can always access 90 days of events regardless of that being enabled

[ Parent | on HN ]
Re:Rubygems.org AWS Root Access Event – September 2025 by frenchtoast8 on Thursday October 09, 2025 @04:21PM (#45532614)
This was my understanding as well, but earlier I couldn't find any documentation to prove this so I never wrote a comment.

CloudTrail can be configured to save logs to S3 or CloudWatch Logs, but I think that even if you were to disable, delete, or tamper with these logs, you can still search and download unaltered logs directly from AWS using the CloudTrail Events page.

[ Parent | on HN ]
Re:Rubygems.org AWS Root Access Event – September 2025 by ctoth on Thursday October 09, 2025 @04:55PM (#45532984)
Only management events, see https://news.ycombinator.com/item?id=45532772
[ Parent | on HN ]