AWS CloudTrail

AWS CloudTrail is an AWS tool primarily used for logging any events that represent operations and actions done by users, AWS services, or IAM roles. These logs can be analyzed for monitoring and governing the AWS infrastructure. These events comprise any AWS service or resource actions via the AWS Management Console, AWS CLI, or AWS SDKs and APIs. This makes CloudTrail ideal for auditing, validating compliance standards, identifying security breaches, or troubleshooting any operational issues.

Note: CloudTrail Event History is automatically enabled by default when we create an AWS account without requiring us to perform any steps manually. Any activity that happens within our AWS account gets recorded as a CloudTrail event.