This is a service that tracks and records just about all API calls made within your AWS account. This is a fantastic service to have at your side. For every API call made, AWS will track the following:
- The API that was called
- The service to which the API call was made against
- The timestamp when it was called
- The source IP address of the requester
This is all great information when trying to identify when and how an incident occurred within your environment.
More on AWS CloudTrail will be discussed in Chapter 12, Implementing Logging Mechanisms.
