Amazon CloudTrail

From NovaOrdis Knowledge Base
Jump to navigation Jump to search

Internal

Overview

Amazon CloudTrail is mainly used to log the API calls across the AWS infrastructure. It keeps the history of API calls generated by the AWS management console, AWS SDKs, command line tools, and every other AWS services. The logs generated by the API activity are stored in an S3 bucket. The same activity can generate Amazon CloudWatch events. CloudTrail can be used to identify users and accounts, the source IP address from which the calls were made, and when the calls occurred, to troubleshoot security and operational issues.