AWS CloudWatch now adds support for AWS CloudHSM Audit Logs

AWS CloudHSM now collects all the HSM audit logs and sends them to the Amazon CloudWatch Logs. This will help you to manage the AWS CloudHSM audit logs including filtering and searching the logs and exporting the log data in the Amazon S3. When HSM receives a command from the AWS CloudHSM software libraries and the command line tools then it records the execution of the command in the audit logs. It consists of all client-initiated management commands that are the keys and the manage users, login and out of the HSM and create and delete the HSM. You have to configure a service linked role to deliver HSM instance audit logs to Amazon CloudWatch and other than that you don’t have to do anything to receive the audit logs. This feature will be applicable to only the new CloudHSM only and not the CloudHSM Classic.