Amazon CloudTrail
Track user activity and API usage
Amazon CloudTrail
Track user activity and API usage
Amazon CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your Amazon Web Services account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your Amazon Web Services infrastructure. CloudTrail provides event history of your Amazon Web Services account activity, including actions taken through the Amazon Management Console, Amazon SDKs, command line tools, and other Amazon Web Services services. This event history simplifies security analysis, resource change tracking, and troubleshooting.
Amazon CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your Amazon Web Services account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your Amazon Web Services infrastructure. CloudTrail provides event history of your Amazon Web Services account activity, including actions taken through the Amazon Management Console, Amazon SDKs, command line tools, and other Amazon Web Services services. This event history simplifies security analysis, resource change tracking, and troubleshooting.
Benefits
Visibility Into User and Resource Activity
Security Analysis and Troubleshooting
Simplified Compliance
Security Automation
Benefits
Visibility Into User and Resource Activity
Security Analysis and Troubleshooting
Simplified Compliance
Security Automation
Use Cases
Security Analysis
Compliance Aid
Operational Issue Troubleshooting
Use Cases
Security Analysis
Compliance Aid
Operational Issue Troubleshooting
You can troubleshoot operational issues by leveraging the Amazon API call history produced by Amazon CloudTrail. For example, you can quickly identify the most recent changes made to resources in your environment, including creation, modification, and deletion of Amazon Web Services resources (e.g., Amazon EC2 instances, Amazon VPC security groups, and Amazon EBS volumes).
Integrations
Amazon CloudWatch Logs Integration
Amazon CloudWatch Events
Integrations
Amazon CloudWatch Logs Integration
Amazon CloudTrail integration with Amazon CloudWatch Logs enables you to send management and data events recorded by CloudTrail to CloudWatch Logs. CloudWatch Logs allows you to create metric filters to monitor events, search events, and stream events to other Amazon Web Services services, such as Amazon Lambda.
Amazon CloudWatch Events
Amazon CloudTrail integration with Amazon CloudWatch Events enables you to automatically respond to changes to your Amazon Web Services resources. With CloudWatch Events, you are able to define actions to execute when specific events are logged by Amazon CloudTrail. For example, if CloudTrail logs a change to an Amazon EC2 security group, such as adding a new ingress rule, you can create a CloudWatch Events rule that sends this activity to an Amazon Lambda function. Lambda can then execute a workflow to create a ticket in your IT Helpdesk system.