CloudTrail Logging

When we use server access logs, it’s a bit difficult to analyze and track individual actions performed by an IAM user, a role, or a service on an S3 bucket.

With CloudTrail logging, detailed information is logged that allows easy monitoring of the API call actions performed on an S3 bucket. The logs are stored as JSON files, which can be interpreted easily using the AWS CloudTrail console.

Types of CloudTrail events

CloudTrail logs actions performed as events, which have been further classified into the following:

• Management events: These events include control plane actions, such as ...