Leveraging Blockchain for Cloud Log Security and Compliance in AWS

Abstract

As the demand for cloud computing is increasing across the globe, more and more companies are shifting their data and IT infrastructure to the cloud. Log data integrity, security, and compliance are important in such an environment for anomaly detection, audit trails, and regulatory adherence. However, traditional log management systems suffer from tampering, data breaches, and centralized control. Recent research has, therefore, looked into blockchain technology as a means of boosting cloud security. This paper presents a blockchain-based approach to securing and authenticating AWS cloud logs. Utilizing the blockchain’s immutable and decentralized nature, the proposed system hashes AWS CloudWatch logs with a Python-based system and records the hash on the Ethereum blockchain via a smart contract. This process prevents undetected log alteration or deletion. The smart contract manages log hash storage and verification, with the Infura node facilitating Ethereum blockchain interactions and MetaMask handling private keys and test ETH. Original and modified log hashes are compared to assure the system’s efficiency, besides computing transaction costs and processing times. The findings suggest blockchain’s potential as a solid framework for log data security and compliance, offering a decentralized, tamper-proof log storage solution that enhances cloud infrastructure security and compliance for organizations.