AWS CloudTrail

AWS CloudTrail is a service that simplifies the compliance audits by automatically recording and storing event logs for actions made within a user’s AWS account. AWS CloudTrail integrates with Amazon CloudWatch Logs to provide a convenient way to search through log data, accelerate incident investigations, expedite responses to auditor requests, and identify out-of-compliance events. AWS CloudTrail also offers visibility into user and resource activity by recording API calls and AWS management console actions. The event history feature offers an excellent platform to view, search, and download the recent AWS account activity. The event history feature allows gaining of visibility into changes in the AWS account resources to enable strengthening of security processes and simplifying operational issue resolution. The multi-region configuration feature allows configuring of AWS CloudTrail to deliver log files from multiple regions to a single Amazon S3 bucket for a single account. The log file integrity validation feature offers an excellent platform to validate the integrity of AWS CloudTrail log files stored in the Amazon S3 bucket and detect whether the log files were unchanged, modifies, or deleted since CloudTrail delivers them to the Amazon S3 bucket. The log file encryption feature facilitates encrypting of all log files delivered to a specified Amazon S3 bucket using Amazon S3 server-side encryption. The data events feature give insights into the resource operations performed on or within the resource itself. The management of events feature offers a useful platform to have insights into the management of operations performed on resources in the AWS account.