Amazon CloudTrail

Amazon CloudTrail increases visibility into your user and resource activity by recording Amazon Management Console actions and API calls. You can identify which users and accounts called Amazon Web Services, the source IP address from which the calls were made, and when the calls occurred.

With Amazon CloudTrail, you can discover and troubleshoot security and operational issues by capturing a comprehensive history of changes that occurred in your Amazon Web Services account within a specified period of time.

With Amazon CloudTrail, simplify your compliance audits by automatically recording and storing event logs for actions made within your Amazon Web Services account. Integration with Amazon CloudWatch Logs provides a convenient way to search through log data, identify out-of-compliance events, accelerate incident investigations, and expedite responses to auditor requests.

Amazon CloudTrail allows you track and automatically respond to account activity threatening the security of your Amazon Web Services resources. With Amazon CloudWatch Events integration, you can define workflows that execute when events that can result in security vulnerabilities are detected. For example, you can create a workflow to add a specific policy to an Amazon S3 bucket when CloudTrail logs and API call that makes that bucket public.