CloudTrail

Introduction

• Internal monitors of API calls being made
• Audit changes to AWS resources
• Enabled by default
• Event Types:
  • Management Events
  • Data Events
  • CloudTrail Insights Events
    • analyze events and try to detect unusual activity in your account
• Event Retention
  • Events are stored by default for 90 days
  • To keep events beyond this period, log them to S3 and use Athena to analyze them