AWS Cloud TutorialLesson 68Free preview
AWS CloudTrail
This lesson is part of AWS · All levels
Summary
AWS CloudTrail records every API activity in your account: who's doing what, when, and from where. Event history is available for free for 90 days for quick investigation, while trails send log to S3 for long-term storage. CloudTrail also supports integrity verification as well as encryption with KMS.
Key points
- CloudTrail is a trace of the audit of API activity (management and data events)
- Event history is available for free 90 days
- Trail sends log to S3, can cross accounts and cross organizations
- The integrity validation file detects changes
- Integrated with CloudWatch and Athena for analysis
Full lesson
Code examples and quizzes
Full lessons, code examples, and quizzes are available to subscribers. 5 questions.