AWS CloudTrail is a service that is used heavily when it comes to compliance and auditing. This is because its core function is to track and record application programming interface (API) calls made within your AWS account. These API requests can be initiated from users within the management console, when using an SDK or via the AWS CLI, to those initiated by other AWS services that may be responding to events, for example, an alert being sent by SNS when a CloudWatch metric threshold has been met.
CloudTrail is a global service covering all regions and most AWS services: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-aws-service-specific-topics.html.
With so much coverage, not only does this make an effective compliance tool, it also makes a great security analysis tool. This is because the information captured during an API call also contains...
