Using CloudTrail with Amazon Certificate Manager - Amazon Certificate Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Using CloudTrail with Amazon Certificate Manager

Amazon Certificate Manager is integrated with Amazon CloudTrail, a service that provides a record of actions taken by a user, role, or an Amazon service in ACM. CloudTrail is enabled by default on your Amazon account. CloudTrail captures API calls for ACM as events, including calls from the ACM console and code calls to the ACM API operations. If you configure a trail, you can enable continuous delivery of CloudTrail events to an Amazon S3 bucket, including events for ACM. If you don't configure a trail, you can still view the most recent events in the CloudTrail console in Event history.

Using the information collected by CloudTrail, you can determine the request that was made to ACM, the IP address from which the request was made, who made the request, when it was made, and additional details. For more information, see Viewing Events with CloudTrail Event History. When supported event activity occurs in ACM, that activity is recorded in a CloudTrail event along with other Amazon service events in Event history. You can view, search, and download recent events in your Amazon account.

Additionally, you can configure other Amazon services to further analyze and act upon the event data collected in CloudTrail logs.

For more information about CloudTrail, consult the following documentation: