AWS CloudTrail

CloudTrail is a service provider by AWS to help monitor and log activities in AWS accounts.

1. Monitor Avtivity in AWS Accounts
   CloudTrail records all actions taken when provisioning and modifying resources in AWS accounts.
2. Store historical logs
   CloudTrail integrates with S3 to store historical data.
   Queries can be run on the data in S3 for audits.
   Retention period is by default 90 days for keeping a longer period it must be stored in S3 bucket.
3. Integrate with other services (e.g. Event-driven)
   CloudTrail works with other services to raise alarms like AWS CloudWatch, analyze access patterns, and much more.

CloudTrail use case