AWS CloudTrail

E293758

AWS CloudTrail is a logging and auditing service that records and monitors API calls and account activity across AWS resources for security, compliance, and operational troubleshooting.

All labels observed (7)

How this entity was disambiguated

Statements (75)

Predicate Object
instanceOf AWS service ⓘ
audit logging service ⓘ
cloud service ⓘ
configurationModel per-account configuration ⓘ
per-organization configuration ⓘ
developedBy Amazon Web Services ⓘ
hasComponent CloudTrail Insights ⓘ
linked to: AWS CloudTrail

CloudTrail Lake ⓘ
linked to: AWS CloudTrail

event history ⓘ
trails ⓘ
hasPurpose compliance support ⓘ
governance ⓘ
operational troubleshooting ⓘ
security auditing ⓘ
integratesWith AWS CloudTrail Lake ⓘ
linked to: AWS CloudTrail

AWS Config ⓘ
AWS Identity and Access Management ⓘ
AWS Organizations ⓘ
AWS Security Hub ⓘ
Amazon Athena ⓘ
Amazon CloudWatch Events ⓘ
linked to: Amazon CloudWatch

Amazon CloudWatch Logs ⓘ
linked to: Amazon CloudWatch

Amazon EventBridge ⓘ
Amazon S3 ⓘ
logFormat JSON ⓘ
monitors AWS API calls ⓘ
AWS account activity ⓘ
data events ⓘ
management events ⓘ
read events ⓘ
write events ⓘ
offers free event history for recent management events ⓘ
partOf Amazon Web Services cloud platform ⓘ
linked to: Amazon Web Services
providedBy Amazon Web Services ⓘ
records API call history ⓘ
AWS CLI calls ⓘ
AWS Management Console sign-in events ⓘ
AWS SDK calls ⓘ
AWS service-to-service calls ⓘ
role activity ⓘ
service activity ⓘ
user activity ⓘ
regionScope regional service ⓘ
securityFeature access control via IAM policies ⓘ
tamper-evident logs via integrity validation ⓘ
storesLogsIn Amazon S3 ⓘ
supportsComplianceStandard HIPAA evidence collection ⓘ
ISO evidence collection ⓘ
PCI DSS evidence collection ⓘ
SOC evidence collection ⓘ
supportsFeature API activity search ⓘ
CloudTrail Lake ⓘ
linked to: AWS CloudTrail

advanced event selectors ⓘ
data event logging ⓘ
encryption at rest ⓘ
encryption with AWS KMS ⓘ
event history ⓘ
event selectors ⓘ
insights events ⓘ
log file integrity validation ⓘ
long-term event storage ⓘ
management event logging ⓘ
multi-region trails ⓘ
organization trails ⓘ
organization-level logging ⓘ
single-region trails ⓘ
supportsResourceType AWS Lambda functions ⓘ
linked to: AWS Lambda

Amazon DynamoDB tables ⓘ
Amazon S3 buckets ⓘ
many AWS resource types ⓘ
usedFor change tracking ⓘ
forensic analysis ⓘ
incident response ⓘ
regulatory compliance evidence ⓘ
user behavior analysis ⓘ

How these facts were elicited

Referenced by (41)

Full triples — surface form annotated when it differs from this entity's canonical label.

Amazon Web Services → offersService → AWS CloudTrail ⓘ
Amazon RDS → integratesWith → AWS CloudTrail ⓘ
Amazon CloudWatch → integratesWith → AWS CloudTrail ⓘ
Amazon S3 → integratesWith → AWS CloudTrail ⓘ
Amazon ECS → integratesWith → AWS CloudTrail ⓘ
AWS Fargate → integratesWith → AWS CloudTrail ⓘ
Amazon SageMaker → integratesWith → AWS CloudTrail ⓘ
AWS CloudFormation → supportsIntegration → AWS CloudTrail ⓘ
AWS CloudTrail → integratesWith → AWS CloudTrail Lake ⓘ
linked to: AWS CloudTrail
AWS CloudTrail → supportsFeature → CloudTrail Lake ⓘ
linked to: AWS CloudTrail
AWS CloudTrail → hasComponent → CloudTrail Lake ⓘ
linked to: AWS CloudTrail
AWS CloudTrail → hasComponent → CloudTrail Insights ⓘ
linked to: AWS CloudTrail
AWS CodeCommit → integratesWith → AWS CloudTrail ⓘ
Amazon API Gateway → integratesWith → AWS CloudTrail ⓘ
Amazon SNS → supportsIntegration → AWS CloudTrail ⓘ
Amazon SQS → integratesWith → AWS CloudTrail ⓘ
Amazon ElastiCache → integratesWith → AWS CloudTrail ⓘ
Amazon Neptune → integratesWith → AWS CloudTrail ⓘ
Amazon DocumentDB → integratesWith → AWS CloudTrail ⓘ
AWS Config → integratesWith → AWS CloudTrail ⓘ
AWS Config → supportsResourceType → AWS CloudTrail ⓘ
AWS Control Tower → integratesWith → AWS CloudTrail ⓘ
Amazon EFS → integratesWith → AWS CloudTrail ⓘ
Sumo Logic → integratesWith → CloudTrail ⓘ
linked to: AWS CloudTrail
Amazon Athena → integratesWith → AWS CloudTrail ⓘ
AWS Management and Governance services → includesService → AWS CloudTrail Lake ⓘ
linked to: AWS CloudTrail
VPC Flow Logs → integratesWith → AWS CloudTrail (for auditing configuration changes) ⓘ
linked to: AWS CloudTrail
Amazon EventBridge → integratesWith → AWS CloudTrail ⓘ
Amazon EventBridge → uses → CloudTrail for auditing ⓘ
linked to: AWS CloudTrail
AWS Systems Manager → integratesWith → AWS CloudTrail ⓘ
AWS Management Console → supportsService → AWS CloudTrail ⓘ
S3 public access block → monitoredBy → AWS CloudTrail ⓘ
S3 One Zone-IA → integratesWith → AWS CloudTrail ⓘ
AWS DataSync → integratesWith → AWS CloudTrail ⓘ
AWS CDK → supportsService → AWS CloudTrail ⓘ
AWS Outposts → integratesWith → AWS CloudTrail ⓘ