AWS CloudTrail

• AWS CloudTrail is a service that enables governance, compliance, and auditing of your AWS account.

• Logs and monitors user activity.

• Provides event history of AWS account.

• We can identify who accessed AWS account, when, from where and what activity they performed.

• 90 days event history provided by default.

Note: AWS CloudWatch monitors your AWS resources and applications, whereas CloudTrail monitors the activity in your AWS environment.