Auditing with CloudTrail
AWS CloudTrail is primarily used to audit, secure, and track user activity and API usage for your AWS accounts. CloudTrail continuously monitors and retains account activity for all actions performed within your AWS environments. Although not directly related to cost optimization, CloudTrail is an important governance tool nonetheless and it’s worth mentioning here.
When you use the default AWS Control Tower settings to deploy a multi-account AWS environment, Control Tower automatically creates a CloudTrail baseline and a logging account that aggregates API activity across all your accounts. The CloudTrail service collects and retains this log information for you to query and analyze at the required time. If you’re not using Control Tower, you have to enable CloudTrail manually for the AWS account.
CloudTrail is helpful for seeing the activities that are taking place to track their cost and usage. This is especially helpful if certain resources...
