AWS CloudTrail
#62 · Level 2 · Scaling and resilience · Monitoring and operationsConcept
Section titled “Concept”AWS CloudTrail keeps a history of the actions in your AWS account. Whether someone uses the console, CLI or SDK to do something in AWS, each API call is recorded as an event. Each event shows who did it, when, from which IP, and on which resource. You can view recent events directly, and to keep them for a long time you can create a trail and store them in S3. CloudWatch shows how the system is running, and CloudTrail shows who did what.
Simple example
Section titled “Simple example”An office register book — who came in and when, which file they opened, what they changed; everything is written down.
Why it’s needed
Section titled “Why it’s needed”If something is deleted or a setting is wrong, you can find out who did it. It is essential for security investigations and audits.
Where it’s used
Section titled “Where it’s used”Finding out “Who deleted the database?”, catching suspicious logins, proving that rules are being followed.
Azure equivalent
Section titled “Azure equivalent”Azure Activity Log
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: