This guide explains how to use Amazon CloudTrail to log, monitor, and retain account activity events for AWS services.
Amazon CloudTrail is a service that enables you to capture, store, and analyze API calls made in your AWS accounts. This user guide provides detailed instructions on setting up trails, managing event history, and configuring logging for various AWS services.
The document covers the entire workflow of using CloudTrail, including creating trails for individual accounts or organizations, integrating with other services like Amazon EventBridge and CloudWatch Logs, and utilizing CloudTrail Lake for advanced querying. It also includes sections on security best practices, log file integrity validation, and troubleshooting common issues.
You can create a trail for an organization using the AWS Management Console or the Command Line Interface.
Amazon CloudTrail records events related to actions taken against AWS resources in your account.
CloudTrail receives log files from multiple Regions and manages data consistency across them.