AWS CloudTrail
A service that records account activity and API calls for governance, auditing, and compliance.
AWS CloudTrail is a governance and auditing service that records API calls and account activity across AWS services. Every action through the Management Console, CLI, SDK, or another service becomes an event capturing who made the request, the source IP, the time, and what changed. By default it logs control-plane management events (like creating an S3 bucket or editing an IAM policy); high-volume data events (such as individual S3 object reads and writes) must be enabled separately at extra cost. CloudTrail answers auditing and accountability questions, while CloudWatch monitors performance metrics and logs.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →