Posted On: Apr 9, 2025

Amazon CloudTrail now supports VPC endpoint policies to control access to your CloudTrail resources. When you create a VPC endpoint for CloudTrail, you can attach an endpoint policy to define the CloudTrail actions that can be performed, the IAM user or role that can perform the actions, and the CloudTrail resources these actions can be performed on.

Support for VPC endpoint policies on Amazon CloudTrail is available in Amazon Web Services China (Beijing) region, operated by Sinnet and Amazon Web Services China (Ningxia) region, operated by NWCD.

For more information about Amazon CloudTrail, please visit Amazon CloudTrail documentation.