AWS CloudTrail

E293758

AWS CloudTrail is a logging and auditing service that records and monitors API calls and account activity across AWS resources for security, compliance, and operational troubleshooting.

All labels observed (5)

Label Occurrences
AWS CloudTrail canonical 22
CloudTrail Lake 2
AWS CloudTrail Lake 1

How this entity was disambiguated

Statements (75)

Predicate Object
instanceOf AWS service ⓘ
audit logging service ⓘ
cloud service ⓘ
configurationModel per-account configuration ⓘ
per-organization configuration ⓘ
developedBy Amazon Web Services ⓘ
hasComponent AWS CloudTrail self-linksurface differs ⓘ
surface form: CloudTrail Insights

AWS CloudTrail self-linksurface differs ⓘ
surface form: CloudTrail Lake

event history ⓘ
trails ⓘ
hasPurpose compliance support ⓘ
governance ⓘ
operational troubleshooting ⓘ
security auditing ⓘ
integratesWith AWS CloudTrail self-linksurface differs ⓘ
surface form: AWS CloudTrail Lake

AWS Config ⓘ
AWS Identity and Access Management ⓘ
AWS Organizations ⓘ
AWS Security Hub ⓘ
Amazon Athena ⓘ
Amazon CloudWatch ⓘ
surface form: Amazon CloudWatch Events

Amazon CloudWatch ⓘ
surface form: Amazon CloudWatch Logs

Amazon EventBridge ⓘ
Amazon S3 ⓘ
logFormat JSON ⓘ
monitors AWS API calls ⓘ
AWS account activity ⓘ
data events ⓘ
management events ⓘ
read events ⓘ
write events ⓘ
offers free event history for recent management events ⓘ
partOf Amazon Web Services ⓘ
surface form: Amazon Web Services cloud platform
providedBy Amazon Web Services ⓘ
records API call history ⓘ
AWS CLI calls ⓘ
AWS Management Console sign-in events ⓘ
AWS SDK calls ⓘ
AWS service-to-service calls ⓘ
role activity ⓘ
service activity ⓘ
user activity ⓘ
regionScope regional service ⓘ
securityFeature access control via IAM policies ⓘ
tamper-evident logs via integrity validation ⓘ
storesLogsIn Amazon S3 ⓘ
supportsComplianceStandard HIPAA evidence collection ⓘ
ISO evidence collection ⓘ
PCI DSS evidence collection ⓘ
SOC evidence collection ⓘ
supportsFeature API activity search ⓘ
AWS CloudTrail self-linksurface differs ⓘ
surface form: CloudTrail Lake

advanced event selectors ⓘ
data event logging ⓘ
encryption at rest ⓘ
encryption with AWS KMS ⓘ
event history ⓘ
event selectors ⓘ
insights events ⓘ
log file integrity validation ⓘ
long-term event storage ⓘ
management event logging ⓘ
multi-region trails ⓘ
organization trails ⓘ
organization-level logging ⓘ
single-region trails ⓘ
supportsResourceType AWS Lambda ⓘ
surface form: AWS Lambda functions

Amazon DynamoDB tables ⓘ
Amazon S3 buckets ⓘ
many AWS resource types ⓘ
usedFor change tracking ⓘ
forensic analysis ⓘ
incident response ⓘ
regulatory compliance evidence ⓘ
user behavior analysis ⓘ

How these facts were elicited

Referenced by (27)

Full triples — surface form annotated when it differs from this entity's canonical label.

Amazon Web Services → offersService → AWS CloudTrail ⓘ
Amazon RDS → integratesWith → AWS CloudTrail ⓘ
Amazon CloudWatch → integratesWith → AWS CloudTrail ⓘ
Amazon S3 → integratesWith → AWS CloudTrail ⓘ
Amazon ECS → integratesWith → AWS CloudTrail ⓘ
AWS Fargate → integratesWith → AWS CloudTrail ⓘ
Amazon SageMaker → integratesWith → AWS CloudTrail ⓘ
AWS CloudFormation → supportsIntegration → AWS CloudTrail ⓘ
AWS CloudTrail → integratesWith → AWS CloudTrail self-linksurface differs ⓘ
this entity surface form: AWS CloudTrail Lake
AWS CloudTrail → supportsFeature → AWS CloudTrail self-linksurface differs ⓘ
this entity surface form: CloudTrail Lake
AWS CloudTrail → hasComponent → AWS CloudTrail self-linksurface differs ⓘ
this entity surface form: CloudTrail Lake
AWS CloudTrail → hasComponent → AWS CloudTrail self-linksurface differs ⓘ
this entity surface form: CloudTrail Insights
AWS CodeCommit → integratesWith → AWS CloudTrail ⓘ
Amazon API Gateway → integratesWith → AWS CloudTrail ⓘ
Amazon SNS → supportsIntegration → AWS CloudTrail ⓘ
Amazon SQS → integratesWith → AWS CloudTrail ⓘ
Amazon ElastiCache → integratesWith → AWS CloudTrail ⓘ
Amazon Neptune → integratesWith → AWS CloudTrail ⓘ
Amazon DocumentDB → integratesWith → AWS CloudTrail ⓘ
AWS Config → integratesWith → AWS CloudTrail ⓘ
AWS Config → supportsResourceType → AWS CloudTrail ⓘ
AWS Control Tower → integratesWith → AWS CloudTrail ⓘ
Amazon EFS → integratesWith → AWS CloudTrail ⓘ
Sumo Logic → integratesWith → AWS CloudTrail ⓘ
this entity surface form: CloudTrail