Analyzing Amazon CloudTrail with Amazon Athena
Our monitoring scope has been focused on a particular service, getting logs from the service and analyzing those logs, using the autogenerated metrics from Amazon CloudWatch or creating our own custom metrics. This monitoring is based on what is going on within the service itself. There are external activities that also go on outside the service. When an EC2 instance is created in the AWS console, that activity can be monitored to know who created the instance, when it was created, and other relevant information about the EC2 instance that has been created. The service that keeps this type of information and more about any service creation or update or deletion is called AWS CloudTrail. CloudTrail serves as the auditor to your AWS account(s). It captures a trail of every activity that goes on within the AWS console. Most of the information it collects is through API calls to the different AWS services.
Important note
API is the acronym...