Definition
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of an AWS account. It records events in your AWS account, providing a history of AWS API calls for your account, including calls made through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. CloudTrail automatically records events from most AWS services, delivering log files to an Amazon S3 bucket. This detailed logging allows you to monitor user activity, troubleshoot issues, and detect suspicious behavior. For example, you can use CloudTrail to see who deleted a specific resource and when. Unlike AWS Config, which tracks resource configuration changes, CloudTrail focuses on the actions performed on those resources. Understanding CloudTrail is crucial for the AWS Certified Solutions Architect Associate and the Certified Cloud Security Professional (CCSP) exams.