AWS CloudTrail

AWS CloudTrail records API activity across an AWS account — every console sign-in, API call and resource change as an event — plus the trail configuration that decides what gets delivered to S3.

Authentication

• AWS Signature V4

Actions

Generic API request. Call any AWS CloudTrail operation on this connection, for the case where no shipped action covers it yet. Every AWS CloudTrail call is a POST to the service host carrying an operation target and a JSON payload; the connection supplies the host, the region, the SigV4 signing and the egress route, so only the target…

• Describe trailsRetrieve settings for one or more CloudTrail trails (DescribeTrails).
• Get trail statusGet the logging status of a trail, including delivery times (GetTrailStatus).
• List trailsList the trails in the current account and region (ListTrails).
• Lookup eventsLook up management events captured by CloudTrail (LookupEvents).

Triggers

• New CloudTrail eventStarts when CloudTrail records a new management or Insights event, detected by polling LookupEvents with a StartTime filter bounded to the last seen event time.

Product names, logos and brands are the property of their respective owners and are used here for identification only. Their use does not imply endorsement by, or affiliation with, those owners.