Logging and Monitoring

Arguably, logging and monitoring is one of the most important things to have properly configured in your AWS environment. It’s the first thing you will look at when something does not behave as expected or when a change has taken place that you were not expecting. AWS has two logging and monitoring solutions – AWS CloudTrail for API logging and Amazon CloudWatch for application-level logging.

AWS CloudTrail

AWS CloudTrail enables the continuous monitoring and logging of your AWS infrastructure. It records all actions taken within your AWS account, including API calls made by users, roles, or services, and stores this data in durable and highly available storage. This information can be used to track changes, investigate security incidents, and ensure compliance with regulatory requirements. CloudTrail provides a comprehensive audit trail, allowing you to understand who accessed which resources, when, and from where.

CloudTrail is enabled...