CloudTrail Logging
Explore how AWS CloudTrail logging enables detailed monitoring of API call actions on S3 buckets. Learn to differentiate management events from data events, view event history using the CloudTrail console, and enable object-level data event logging for thorough S3 activity tracking.
When we use server access logs, it’s a bit difficult to analyze and track individual actions performed by an IAM user, a role, or a service on an S3 bucket.
With CloudTrail logging, detailed information is logged that allows easy monitoring of the API call actions performed on an S3 bucket. The logs are stored as JSON files, which can be interpreted easily using the AWS CloudTrail console.
Types of CloudTrail events
CloudTrail logs actions performed as events, which have been further classified into the following:
-
Management events: These events include control plane actions, such as ...