AWS CloudTrail

AWS CloudTrail (2013) is a web service that records API calls made on your account and delivers log files to your AWS S3 bucket every 5 minutes. Third party products such as CloudCheckr and Splunk can help you to analyze logs.

• Management events: Free
• Data events: 0.10 per 100,000 data events delivered

Related terms

• Amazon GuardDuty
• AWS Security Hub
• Amazon Detective
• AWS Config
• Elastic SIEM
• IAM Access Analyzer
• AWS CloudTrail Insights (Noviembre 2019)

See also

• Audit: acct, atop, tripwire, AIDE, auditd, debsums, AWS Cloudtrail, logwatch, logcheck, Google Santa, Coguard
• Linux logging, Cisco IOS logging
• AWS, Amazon Managed Services, AWS Management & Governance, computing, security, networking, AWS compliance, AWS Outposts AWS Free Tier, AWS certifications, AWS Trusted Advisor, AWS Systems Manager, AWS Config, IAM Access Analyzer, AWS Cost Explorer, AWS Cost Management, AWS Budgets, AWS Organizations, AWS dev: (CodeStar, Cloud9), AWS Partner Network (APN), AWS Resource Access Manager, AWS Quick Starts, AWS Global Accelerator, AWS Elemental MediaStore, AWS Enterprise support, AWS support, AWS Professional Services Consultants, AWS Cloud Map, AWS Marketplace, AWS CLI, AWS Management Console, AWS acceptable use policy, amazonaws.com, Quotas, AWS Support plans, AWS Resource Explorer, AWS Managed Services (AMS), AWS savings, AWS Nitro System, AWS Activate, Serverless, AWS timeline
• Monitoring: Prometheus, Cacti, monit, munin, RRDtool, Zabbix, Netdata, Nagios, Check MK, Icinga, Pingdom, OpsGenie and Datadog, Opsgenie, PRTG, Checkmk

https://aws.amazon.com/es/about-aws/whats-new/2013/11/13/announcing-aws-cloudtrail/

https://aws.amazon.com/cloudtrail/faqs/#Event_payload.2C_timeliness.2C_and_delivery_frequency

https://aws.amazon.com/blogs/aws/announcing-cloudtrail-insights-identify-and-respond-to-unusual-api-activity/