Starting CloudTrail

Amazon CloudTrail is an API log monitoring and recording tool. CloudTrail captures and records all the API calls and related events for your account and stores it into S3. You can also deliver the logs to CloudWatch logs and events.

CloudWatch primarily does three tasks:

• Stores log files in S3
• Looks up the API history
• Gives notification on specific API activity

You can create two types of trails:

• A trail that applies to all regions
• A trail that applies to one region

How to do it...

1. Sign in to the AWS Management Console and click on CloudTrail.

Select CloudTrail

2. Click on Get Started Now.

CloudTrail: Get Started

3. On the Turn on CloudTrail page, provide the Trail name and select Yes if you want to Apply trail to all regions.

4. Under Management events, for Read/Write events, choose if you want your trail to log All, Read-only, Write-only, or None, and then choose Save. By default, trails log All management events.

Turn on CloudTrail

5. Provide a storage location, select Yes, and provide a name...