View a markdown version of this page

Amazon CloudTrail in Amazon Web Services China - Getting Started with Amazon Web Services China
Region availabilityHow Amazon CloudTrail differsDocumentation
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon CloudTrail in Amazon Web Services China

With Amazon CloudTrail, you can monitor your Amazon deployments in the cloud by getting a history of Amazon API calls for your account, including API calls made via the Amazon Web Services Management Console, the Amazon SDKs, the command line tools, and higher-level Amazon services. You can also identify which users and accounts called Amazon APIs for services that support CloudTrail, the source IP address the calls were made from, and when the calls occurred. You can integrate CloudTrail into applications using the API, automate trail creation for your organization, check the status of your trails, and control how administrators turn CloudTrail logging on and off.

Region availability

Amazon CloudTrail is available in the following regions in China:

  • China (Beijing) Region

  • China (Ningxia) Region

How Amazon CloudTrail differs

The following differences apply to Amazon CloudTrail:

  • As of November 22, 2021, Amazon CloudTrail changed how trails capture Amazon CloudFront events. Now, Amazon CloudFront events are available only in the Region where the event was processed, the China (Ningxia) Region, cn-northwest-1. For trails monitoring global service events, be sure to convert single-Region trails in China (Beijing) Region, cn-north-1, to multi-Region trails, to include events from China (Ningxia) Region, cn-northwest-1. For more information, see Converting a trail that applies to one Region to apply to all Regions.

    In contrast, the Event history in the CloudTrail console and the aws cloudtrail lookup-events command will show Amazon CloudFront events in the Region where they occurred.

  • IPv6 is supported.

  • VPC endpoints are supported.

  • CloudTrail Lake is not currently available in China regions.

  • The option to add an Amazon Organizations delegated administrator using the console in the Amazon China Regions is not available. To add a delegated administrator, use the aws cloudtrail register-organization-delegated-admin command.

  • CloudTrail network activity events are not available.

  • CloudTrail enriched events are not available.

Documentation