knowledge

IAM策略构成
Version, 　　　　2012-10-17,还有2018。。。 两个版本
ID, 
Statement, 
Sid, 
　　Effect,　　　　　　　　Deny;Allow　　
　　Principal, 
　　Not Principal, 
　　Action, 
　　Not Action, 
　　Resource, 
　　Not Resource, 
　　Condition, 
　　Supported Data Types
https://docs.aws.amazon.com/zh_cn/IAM/latest/UserGuide/reference_policies_elements.html

 

cloudwatch 可以监控  SWF的事件
DeprecateActivityType
DeprecateDomain
DeprecateWorkflowType

RegisterActivityType
RegisterDomain
RegisterWorkflowType

可以监听S3桶级别的事件;RestApi

CloudTrail Processing Library is a Java library that makes iteasy to build anapplication that reads and process CloudTrail log files 

可选的组件【CloudWatch、SNS、KMS】