From the course: AWS for DevOps: Monitoring, Metrics, and Logging

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Use CloudTrail

Use CloudTrail - Amazon Web Services (AWS) Tutorial

From the course: AWS for DevOps: Monitoring, Metrics, and Logging

Start my 1-month free trial

Use CloudTrail

“

- [Instructor] The next service is CloudTrail. People get confused between CloudTrail and CloudWatch, and let's just take a couple minutes to explore the difference here. Very clear, CloudTrail provides a record of your AWS API calls, so specific APIs on a service. This is very much for auditing, so you can audit what your users are doing, you can troubleshoot operational and security incidents, and you can demonstrate compliance with your policies or regulatory standards. So, it stores log files in S3, and you can look up specific API activity, so they give you an example. Which IM user made a particular call? Which API calls failed due to permission issues? And, most importantly, you can get notified, so you can send CloudTrail logs to CloudWatch logs, that's a little bit tricky, and you can receive notifications. Remember, CloudWatch is your alerting mechanism by default. CloudTrail as we'll see allows you to say, this API call is interesting to me, log this particular history…

Contents