Audit Trail
Monitoring & DetectionAn Audit Trail is a chronological record of activities that provides evidence of who did what, when, and from where. In AWS, CloudTrail is the primary audit trail - it records every API call across all services.
Components of an AWS Audit Trail
- CloudTrail: API call history (management + data events)
- S3 access logs: object-level access records
- VPC Flow Logs: network traffic metadata
- CloudWatch Logs: application and system logs
- Config: configuration change history for every resource
Related AWS Services
Related Terms
AWS service that records every API call made in your account, providing an audit trail of who did what, when, and from where.
Meeting regulatory requirements and industry standards (SOC 2, HIPAA, GDPR, PCI DSS, CIS) for data protection, access control, and security practices in the cloud.
The practice of collecting, preserving, and analyzing digital evidence from cloud resources after a security incident to understand what happened and how.
Toc Consulting: AWS Security & Cloud Architecture
Securing your AWS estate?
Our team helps engineering teams secure and architect AWS the right way: assessment in week one, a prioritized action plan in week two.