AWS CloudTrail
CloudTrail is a service that records all API calls made to the AWS from your account. The tool is very useful for troubleshooting operational issues and, of course, is a key component of managing the security and compliance of an AWS account. The tool articulates around a concept of the "trail." Each trail lets you log any API activity undertaken on your account. Price-wise, the first trail created is always free and therefore, using this service is a no-brainer.
In the following section, we will create a CloudFormation stack using troposphere to log all API activities. CloudTrail stores up to 7 days' worth of activity; in order to extend that duration, we will take advantage of its ability also to export the data to an S3 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access