What is AWS CloudTrail?

It is a web service, which effectively records AWS API calls for an account as well as deliver log files directly to you when needed. AWS CloudTrail records the identity and IP address of the API caller, the time of the API call, the request parameters and the response elements returned by the AWS Service.

How to Filter CloudTrail Log Events

You can filter by:

• Name
• Date
• Region
• Address IP
• User Name
• Object ID or Name
• Custom Group

Create custom actions group

Custom group allows in easy way filter out selected CloudTrail log actions

Track top activity

See who is the 10 most active users accessing your AWS

Track top executed CloudTrail events

Visual what AWS region is most active