In this section, I want to look at some snippets of the log files that are created by your trails so you can see some of the information that is captured.
As with many other policies within AWS, CloudTrail logs are written in JavaScript Objection Notation (JSON)Â format, and a new log entry (or event) is made each and every time an API is called.Â
These events, when written to a log file, may look similar to the snippet shown here:
"awsRegion": "eu-west-1",
"eventID": "6ce47c89-5908-452d-87cc-a7c251ac4ac0",
"eventName": "PutObject",
"eventSource": "s3.amazonaws.com",
"eventTime": "2019-11-27T23:54:21Z",
"eventType": "AwsApiCall",
"eventVersion": "1.05",
"readOnly"...