thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Foundational

AWS CloudTrail

AWS service that records API activity and account events for governance, auditing and security investigation.

Definition

CloudTrail logs management events by default and shows 90 days of history in the console. Trails deliver events to S3 (and optionally CloudWatch Logs), can cover all regions and the whole organization, include optional data and network activity events, and support log file integrity validation. CloudTrail Lake stores and queries events with SQL.

Example

Investigators use CloudTrail to see which IAM principal called DeleteBucket and from what IP address.

Exam tip

CloudTrail answers who did what and when (API auditing); CloudWatch answers how resources are performing; Config answers what the configuration was.

Related terms