CloudTrail supported services and integrations - Amazon CloudTrail
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.

CloudTrail supported services and integrations

CloudTrail supports logging events for many Amazon services. You can find the specifics for each supported service in that service's guide. Links to those service-specific topics are provided below. In addition, some Amazon services can be used to analyze and act upon data collected in CloudTrail logs. You can browse an overview of those service integrations here.

Note

To see the list of supported regions for each service, see Regions and Endpoints in the Amazon Web Services General Reference.

Amazon service integrations with CloudTrail Logs

You can configure other Amazon services to further analyze and act upon the event data collected in CloudTrail logs. For more information, see the following topics.

Amazon Service Topic Description
Amazon Athena Querying Amazon CloudTrail Logs

Using Athena with CloudTrail logs is a powerful way to enhance your analysis of Amazon service activity. For example, you can use queries to identify trends and further isolate activity by attribute, such as source IP address or user.

You can automatically create tables for querying logs directly from the CloudTrail console, and use those tables to run queries in Athena. For more information, see Creating a Table for CloudTrail Logs in the CloudTrail Console in the Amazon Athena User Guide.

Note

Running queries in Amazon Athena incurs additional costs. For more information, see Amazon Athena Pricing.

Amazon CloudWatch Logs Monitoring CloudTrail Log Files with Amazon CloudWatch Logs

You can configure CloudTrail with CloudWatch Logs to monitor your trail logs and be notified when specific activity occurs. For example, you can define CloudWatch Logs metric filters that will trigger CloudWatch alarms and send notifications to you when those alarms are triggered.

Note

Standard pricing for Amazon CloudWatch and Amazon CloudWatch Logs applies. For more information, see Amazon CloudWatch Pricing.

CloudTrail integration with Amazon Organizations

You can create a trail in the management account for an organization that collects all event data for all Amazon accounts in an organization in Amazon Organizations. This is called an organization trail. Creating an organization trail helps you define a uniform event logging strategy for your organization. An organization trail is applied automatically to each Amazon account in your organization. Users in member accounts can see these trails but cannot modify them, and by default cannot see the log files created for the organization trail. For more information, see Creating a trail for an organization.

Amazon service topics for CloudTrail

You can learn more about how the events for individual Amazon services are recorded in CloudTrail logs, including example events for that service in log files. For more information about how specific Amazon services integrate with CloudTrail, see the topic about integration in the individual guide for that service.

Amazon Service CloudTrail Topics Support began
Alexa for Business Logging Alexa for Business Administration Calls Using Amazon CloudTrail 11/29/2017
Amazon Amplify Logging Amplify API calls using Amazon CloudTrail 11/30/2020
Amazon Audit Manager Logging Amazon Audit Manager API calls with Amazon CloudTrail 12/07/2020
Amazon API Gateway Log API management calls to Amazon API Gateway Using Amazon CloudTrail 07/09/2015
Amazon Connect Logging Amazon Connect API Calls with Amazon CloudTrail 12/11/2019
Application Auto Scaling Logging Application Auto Scaling API calls with Amazon CloudTrail 10/31/2016
Amazon Application Discovery Service Logging Application Discovery Service API Calls with Amazon CloudTrail 05/12/2016
Amazon AppFlow Logging Amazon AppFlow API calls with Amazon CloudTrail 04/22/2020
Amazon App Mesh Logging App Mesh API Calls with Amazon CloudTrail
Amazon App Runner Logging App Runner API calls with Amazon CloudTrail 05/18/2021
Amazon AppStream 2.0 Logging Amazon AppStream 2.0 API Calls with Amazon CloudTrail 04/25/2019
Amazon AppSync Logging Amazon AppSync API Calls with Amazon CloudTrail 02/13/2018
Amazon Athena Logging Amazon Athena API Calls with Amazon CloudTrail 05/19/2017
Amazon Auto Scaling Logging Amazon Auto Scaling API Calls By Using CloudTrail 08/15/2018
Amazon Backup Logging Amazon Backup API Calls with Amazon CloudTrail 02/04/2019
Amazon Batch Logging Amazon Batch API Calls with Amazon CloudTrail 1/10/2018
Amazon Billing and Cost Management Logging Amazon Billing and Cost Management API Calls with Amazon CloudTrail 06/07/2018
Amazon BugBust Logging BugBust API calls using CloudTrail 06/24/2021
Amazon Certificate Manager Using Amazon CloudTrail 03/25/2016
Amazon Certificate Manager Private Certificate Authority Using CloudTrail 06/06/2019
Amazon Chime Log Amazon Chime Administration Calls Using Amazon CloudTrail 09/27/2017
Amazon Cloud Directory Logging Amazon Cloud Directory API Calls Using Amazon CloudTrail 01/26/2017
Amazon Cloud9 Logging Amazon Cloud9 API Calls with Amazon CloudTrail 01/21/2019
Amazon CloudFormation Logging Amazon CloudFormation API Calls in Amazon CloudTrail 04/02/2014
Amazon CloudFront Using Amazon CloudTrail to Capture Requests Sent to the CloudFront API 05/28/2014
Amazon CloudHSM Logging Amazon CloudHSM API Calls By Using Amazon CloudTrail 01/08/2015
Amazon Cloud Map Logging Amazon Cloud Map API Calls with Amazon CloudTrail 11/28/2018
Amazon CloudSearch Logging Amazon CloudSearch Configuration Service Calls Using Amazon CloudTrail 10/16/2014
Amazon CloudTrail Amazon CloudTrail API Reference (All CloudTrail API calls are logged by CloudTrail.) 11/13/2013
Amazon CloudWatch Logging Amazon CloudWatch API Calls in Amazon CloudTrail 04/30/2014
CloudWatch Events Logging Amazon CloudWatch Events API Calls in Amazon CloudTrail 01/16/2016
CloudWatch Logs Logging Amazon CloudWatch Logs API Calls in Amazon CloudTrail 03/10/2016
Amazon CodeBuild Logging Amazon CodeBuild API Calls with Amazon CloudTrail 12/01/2016
Amazon CodeCommit Logging Amazon CodeCommit API Calls with Amazon CloudTrail 01/11/2017
Amazon CodeDeploy Monitoring Deployments with Amazon CloudTrail 12/16/2014
Amazon CodeGuru Reviewer Logging Amazon CodeGuru Reviewer API Calls with Amazon CloudTrail 12/02/2019
Amazon CodePipeline Logging CodePipeline API Calls By Using Amazon CloudTrail 07/09/2015
AWS CodeStar Logging AWS CodeStar API Calls with Amazon CloudTrail 06/14/2017
AWS CodeStar Notifications Logging AWS CodeStar Notifications API Calls with Amazon CloudTrail 11/05/2019
Amazon Cognito Logging Amazon Cognito API Calls with Amazon CloudTrail 02/18/2016
Amazon Comprehend Logging Amazon Comprehend API Calls with Amazon CloudTrail 01/17/2018
Amazon Comprehend Medical Logging Amazon Comprehend Medical API Calls by Using Amazon CloudTrail 11/27/2018
Amazon Config Logging Amazon Config API Calls By with Amazon CloudTrail 02/10/2015
Amazon Control Tower Logging Amazon Control Tower Actions with Amazon CloudTrail 08/12/2019
Amazon Data Lifecycle Manager Logging Amazon Data Lifecycle Manager API Calls Using Amazon CloudTrail 07/24/2018
Amazon Data Pipeline Logging Amazon Data Pipeline API Calls by using Amazon CloudTrail 12/02/2014
Amazon Database Migration Service (Amazon DMS) Logging Amazon Database Migration Service API Calls Using Amazon CloudTrail 02/04/2016
Amazon DataSync Logging Amazon DataSync API Calls with Amazon CloudTrail 11/26/2018
Amazon Detective Logging Amazon Detective API calls with Amazon CloudTrail 03/31/2020
Amazon Device Farm Logging Amazon Device Farm API Calls By Using Amazon CloudTrail 07/13/2015
Amazon Direct Connect Logging Amazon Direct Connect API Calls in Amazon CloudTrail 03/08/2014
Amazon Directory Service Logging Amazon Directory Service API Calls by Using CloudTrail 05/14/2015
Amazon DocumentDB (with MongoDB compatibility) Logging Amazon DocumentDB API Calls with Amazon CloudTrail 01/09/2019
Amazon DynamoDB Logging DynamoDB Operations By Using Amazon CloudTrail 05/28/2015
Amazon Elastic Container Registry (Amazon ECR) Logging Amazon ECR API Calls By Using Amazon CloudTrail 12/21/2015
Amazon Elastic Container Service (Amazon ECS) Logging Amazon ECS API Calls By Using Amazon CloudTrail 04/09/2015
Amazon Elastic Beanstalk (Elastic Beanstalk) Using Elastic Beanstalk API Calls with Amazon CloudTrail 03/31/2014

Amazon Elastic Block Store (Amazon EBS)

EBS direct APIs

Logging API Calls Using Amazon CloudTrail

Log API Calls for the EBS direct APIs with Amazon CloudTrail

Amazon EBS: 11/13/2013

EBS direct APIs: 06/30/2020

Amazon Elastic Compute Cloud (Amazon EC2) Logging API Calls Using Amazon CloudTrail 11/13/2013
Amazon EC2 Auto Scaling Logging Auto Scaling API Calls By Using CloudTrail 07/16/2014
Amazon EC2 Image Builder Logging EC2 Image Builder API calls using CloudTrail 12/02/2019
Amazon Elastic File System (Amazon EFS) Logging Amazon EFS API Calls with Amazon CloudTrail 06/28/2016
Amazon Fraud Detector Logging Amazon Fraud Detector API Calls with Amazon CloudTrail 01/09/2020
Amazon Elastic Kubernetes Service (Amazon EKS) Logging Amazon EKS API Calls with Amazon CloudTrail 06/05/2018
Elastic Load Balancing Amazon CloudTrail Logging for Your Classic Load Balancer and Amazon CloudTrail Logging for Your Application Load Balancer 04/04/2014
Amazon Elastic Transcoder Logging Amazon Elastic Transcoder API Calls with Amazon CloudTrail 10/27/2014
Amazon ElastiCache Logging Amazon ElastiCache API Calls Using Amazon CloudTrail 09/15/2014
Amazon OpenSearch Service Auditing Amazon OpenSearch Service Domains with Amazon CloudTrail 10/01/2015
AWS Elemental MediaConnect Logging AWS Elemental MediaConnect API Calls with Amazon CloudTrail 11/27/2018
AWS Elemental MediaConvert Logging AWS Elemental MediaConvert API Calls with CloudTrail 11/27/2017
AWS Elemental MediaLive Logging MediaLive API Calls with Amazon CloudTrail 01/19/2019
AWS Elemental MediaPackage Logging AWS Elemental MediaPackage API Calls with Amazon CloudTrail 12/21/2018
Amazon Elemental MediaStore Logging Amazon Elemental MediaStore API Calls with CloudTrail 11/27/2017
AWS Elemental MediaTailor Logging AWS Elemental MediaTailor API Calls with Amazon CloudTrail 02/11/2019
Amazon EMR Logging Amazon EMR API Calls in Amazon CloudTrail 04/04/2014
Amazon EMR on EKS Logging Amazon EMR on EKS API calls using Amazon CloudTrail 12/09/2020
Amazon Fault Injection Simulator Log API calls with Amazon CloudTrail 03/15/2021
Amazon Firewall Manager Logging Amazon Firewall Manager API Calls with Amazon CloudTrail 04/05/2018
Amazon Forecast Logging Amazon Forecast API Calls with Amazon CloudTrail 11/28/2018
FreeRTOS Over-the-Air Updates (OTA) Logging Amazon IoT OTA API Calls with Amazon CloudTrail 05/22/2019
Amazon FSx for Lustre Logging Amazon FSx for Lustre API Calls with Amazon CloudTrail 01/11/2019
Amazon FSx for Windows File Server Monitoring with Amazon CloudTrail 11/28/2018
Amazon GameLift Logging Amazon GameLift API Calls with Amazon CloudTrail 01/27/2016
Amazon S3 Glacier Logging S3 Glacier API Calls By Using Amazon CloudTrail 12/11/2014
Amazon Global Accelerator Logging Amazon Global Accelerator API Calls with Amazon CloudTrail 11/26/2018
Amazon Glue Logging Amazon Glue Operations Using Amazon CloudTrail 11/07/2017
Amazon Ground Station Logging Amazon Ground Station API Calls with Amazon CloudTrail 05/31/2019
Amazon GuardDuty Logging Amazon GuardDuty API Calls with Amazon CloudTrail 02/12/2018
Amazon Health Logging Amazon Health API Calls with Amazon CloudTrail 11/21/2016
Amazon HealthLake Logging Amazon HealthLake API calls with Amazon CloudTrail 12/07/2020
Amazon Honeycode Logging Amazon Honeycode API Calls with Amazon CloudTrail 06/24/2020
Amazon Inspector Logging Amazon Inspector API calls with Amazon CloudTrail 04/20/2016
Amazon Interactive Video Service Logging Amazon IVS API Calls with Amazon CloudTrail 07/15/2020
Amazon IoT Logging Amazon IoT API Calls with Amazon CloudTrail 04/11/2016
Amazon IoT Analytics Logging Amazon IoT Analytics API calls with Amazon CloudTrail 04/23/2018
Amazon IoT 1-Click Logging Amazon IoT 1-Click API Calls with Amazon CloudTrail 05/14/2018
Amazon IoT Events Logging Amazon IoT Events API Calls with Amazon CloudTrail 06/11/2019
Amazon IoT Greengrass Logging Amazon IoT Greengrass API Calls with Amazon CloudTrail 10/29/2018
Amazon IoT Greengrass V2 Log Amazon IoT Greengrass V2 API calls with Amazon CloudTrail 12/14/2020
Amazon IoT SiteWise Logging Amazon IoT SiteWise API calls with Amazon CloudTrail 04/29/2020
Amazon IoT Things Graph Logging Amazon IoT Things Graph API Calls with Amazon CloudTrail 05/31/2019
Amazon Identity and Access Management (IAM) Logging IAM Events with Amazon CloudTrail 11/13/2013
Amazon Kendra Logging Amazon Kendra API calls with Amazon CloudTrail 05/11/2020
Amazon Key Management Service (Amazon KMS) Logging Amazon KMS API Calls using Amazon CloudTrail 11/12/2014
Amazon Kinesis Data Analytics Monitoring Amazon Kinesis Data Analytics with Amazon CloudTrail (SQL Applications) and Monitoring Amazon Kinesis Data Analytics with Amazon CloudTrail (Apache Flink Applications) 03/22/2019
Amazon Kinesis Data Firehose Monitoring Amazon Kinesis Data Firehose API Calls with Amazon CloudTrail 03/17/2016
Amazon Kinesis Data Streams Logging Amazon Kinesis Data Streams API Calls Using Amazon CloudTrail 04/25/2014
Amazon Kinesis Video Streams Logging Kinesis Video Streams API Calls with Amazon CloudTrail 05/24/2018
Amazon Lake Formation Logging Amazon Lake Formation API Calls Using Amazon CloudTrail 08/09/2019
Amazon Lambda

Logging Amazon Lambda API Calls By Using Amazon CloudTrail

Using Lambda with Amazon CloudTrail

Management events: 04/09/2015

Data events: 11/30/2017

Amazon Lex Logging Amazon Lex API Calls with CloudTrail 08/15/2017
Amazon License Manager Logging Amazon License Manager API Calls with Amazon CloudTrail 03/01/2019
Amazon Lightsail Logging Lightsail API Calls with Amazon CloudTrail 12/23/2016
Amazon Location Service Logging and monitoring with Amazon CloudTrail 12/15/2020
Amazon Lookout for Vision Logging Amazon Lookout for Vision calls with Amazon CloudTrail 12/01/2020
Amazon Lookout for Equipment Monitoring Amazon Lookout for Equipment calls with Amazon CloudTrail 12/01/2020
Amazon Lookout for Metrics Viewing Amazon Lookout for Metrics API activity in Amazon CloudTrail 12/08/2020
Amazon Machine Learning

Logging Amazon ML API Calls By Using Amazon CloudTrail

12/10/2015
Amazon Macie Log Amazon Macie API calls using Amazon CloudTrail 05/13/2020
Amazon Managed Blockchain

Logging Amazon Managed Blockchain API calls using Amazon CloudTrail

Logging Ethereum for Managed Blockchain API calls using Amazon CloudTrail (Preview)

04/01/2019
Amazon Managed Grafana Logging Amazon Managed Grafana API calls using Amazon CloudTrail 12/15/2020
Amazon Managed Service for Prometheus Logging Amazon Managed Service for Prometheus API calls using Amazon CloudTrail 12/15/2020
Amazon Keyspaces (for Apache Cassandra) Logging Amazon Keyspaces API calls with Amazon CloudTrail 01/13/2020
Amazon Managed Services Amazon Managed Services 12/21/2016
Amazon Managed Streaming for Apache Kafka Logging Amazon MSK API Calls with Amazon CloudTrail 12/11/2018
Amazon Managed Workflows for Apache Airflow Monitoring Amazon MWAA API activity with Amazon CloudTrail 11/24/2020
Amazon Web Services Marketplace Logging Amazon Web Services Marketplace API Calls with Amazon CloudTrail 05/02/2017
Amazon Web Services Marketplace Metering Service Logging Amazon Web Services Marketplace API Calls with Amazon CloudTrail 08/22/2018
Amazon Migration Hub Logging Amazon Migration Hub API Calls with Amazon CloudTrail 08/14/2017
Amazon Mobile Hub Logging Amazon Mobile CLI API Calls with Amazon CloudTrail 06/29/2018
Amazon MQ Logging Amazon MQ API Calls Using Amazon CloudTrail 07/19/2018
Amazon Neptune Logging Amazon Neptune API Calls Using Amazon CloudTrail 05/30/2018
Amazon Network Firewall Logging calls to the Amazon Network Firewall API with Amazon CloudTrail 11/17/2020
Amazon OpsWorks for Chef Automate Logging Amazon OpsWorks for Chef Automate API Calls with Amazon CloudTrail 07/16/2018
Amazon OpsWorks for Puppet Enterprise Logging OpsWorks for Puppet Enterprise API Calls with Amazon CloudTrail 07/16/2018
Amazon OpsWorks Stacks Logging Amazon OpsWorks Stacks API Calls with Amazon CloudTrail 06/04/2014
Amazon Organizations Logging Amazon Organizations Events with Amazon CloudTrail 02/27/2017
Amazon Outposts Logging Amazon Outposts API calls with Amazon CloudTrail 02/04/2020
Amazon Personal Health Dashboard Logging Amazon Health API Calls with Amazon CloudTrail 12/01/2016
Amazon Personalize Logging Amazon Personalize API Calls with Amazon CloudTrail 11/28/2018
Amazon Pinpoint Logging Amazon Pinpoint API Calls with Amazon CloudTrail 02/06/2018
Amazon Pinpoint SMS and Voice API Logging Amazon Pinpoint API Calls with Amazon CloudTrail 11/16/2018
Amazon Polly Logging Amazon Polly API Calls with Amazon CloudTrail 11/30/2016
Amazon Quantum Ledger Database (Amazon QLDB) Logging Amazon QLDB API Calls with Amazon CloudTrail 09/10/2019
Amazon Certificate Manager Private Certificate Authority Using CloudTrail 04/04/2018
Amazon QuickSight Logging Operations with CloudTrail 04/28/2017
Amazon Redshift Logging Amazon Redshift API Calls with Amazon CloudTrail 06/10/2014
Amazon Rekognition Logging Amazon Rekognition API Calls Using Amazon CloudTrail 04/6/2018
Amazon Relational Database Service (Amazon RDS) Logging Amazon RDS API Calls Using Amazon CloudTrail 11/13/2013
Amazon RDS Performance Insights Logging Amazon RDS API Calls Using Amazon CloudTrail

The Amazon RDS Performance Insights API is a subset of the Amazon RDS API.

06/21/2018
Amazon Resource Access Manager (Amazon RAM) Logging Amazon RAM API Calls with Amazon CloudTrail 11/20/2018
Amazon Resource Groups Logging Amazon Resource Groups API Calls with Amazon CloudTrail 06/29/2018
Amazon RoboMaker Logging Amazon RoboMaker API Calls with Amazon CloudTrail 01/16/2019
Amazon Route 53 Using Amazon CloudTrail to Capture Requests Sent to the Route 53 API 02/11/2015
Amazon Route 53 Application Recovery Controller Logging Amazon Route 53 Application Recovery Controller API calls using Amazon CloudTrail 07/27/2021
Amazon SageMaker

Logging Amazon SageMaker API Calls with Amazon CloudTrail

01/11/2018
Amazon Secrets Manager Monitor the Use of Your Amazon Secrets Manager Secrets 04/05/2018
Amazon Security Hub Logging Amazon Security Hub API Calls with Amazon CloudTrail 11/27/2018
Amazon Security Token Service (Amazon STS)

Logging IAM Events with Amazon CloudTrail

The IAM topic includes information for Amazon STS.

11/13/2013
Amazon Server Migration Service Amazon SMS API Reference 11/14/2016
Amazon Serverless Application Repository Logging Amazon Serverless Application Repository API Calls with Amazon CloudTrail 02/20/2018
Amazon Service Catalog Logging Amazon Service Catalog API Calls with Amazon CloudTrail 07/06/2016
Service Quotas 06/24/2019
Amazon Shield Logging Shield Advanced API Calls with Amazon CloudTrail 02/08/2018
Amazon Simple Email Service (Amazon SES) Logging Amazon SES API Calls By Using Amazon CloudTrail 05/07/2015
Amazon Simple Notification Service (Amazon SNS) Logging Amazon Simple Notification Service API Calls By Using Amazon CloudTrail 10/09/2014
Amazon Simple Queue Service (Amazon SQS) Logging Amazon SQS API Actions Using Amazon CloudTrail 07/16/2014
Amazon Simple Storage Service Logging Amazon S3 API Calls By Using Amazon CloudTrail

Management events: 09/01/2015

Data events: 11/21/2016

Amazon Simple Workflow Service (Amazon SWF) Logging Amazon Simple Workflow Service API Calls with Amazon CloudTrail 05/13/2014
Amazon Web Services Single Sign On (Amazon Web Services SSO) Logging Amazon Web Services SSO API Calls with Amazon CloudTrail 12/07/2017
Amazon Snowball Logging Amazon Snowball API Calls with Amazon CloudTrail 01/25/2019
Amazon Snowball Edge Logging Amazon Snowball Edge API Calls with Amazon CloudTrail 01/25/2019
Amazon Step Functions Logging Amazon Step Functions API Calls with Amazon CloudTrail 12/01/2016
Storage Gateway

Logging Storage Gateway API Calls by Using Amazon CloudTrail

12/16/2014
Amazon Web Services Support

Logging Amazon Web Services Support API Calls with Amazon CloudTrail

04/21/2016
Amazon Systems Manager Logging Amazon Systems Manager API Calls with Amazon CloudTrail 11/13/2013
Amazon Systems Manager Incident Manager Logging Amazon Systems Manager Incident Manager API calls using Amazon CloudTrail 05/10/2021
Amazon Textract Logging Amazon Textract API Calls with Amazon CloudTrail 05/29/2019
Amazon Transcribe Logging Amazon Transcribe API Calls with Amazon CloudTrail 06/28/2018
Amazon Transfer for SFTP Logging Amazon Transfer for SFTP API Calls with Amazon CloudTrail 01/08/2019
Amazon Translate Logging Amazon Translate API Calls with Amazon CloudTrail 04/04/2018
Amazon Transit Gateway Logging API Calls for Your Transit Gateway Using Amazon CloudTrail 11/26/2018
Amazon Trusted Advisor Logging Amazon Trusted Advisor console actions with Amazon CloudTrail 10/22/2020
Amazon Virtual Private Cloud (Amazon VPC)

Logging API Calls Using Amazon CloudTrail

The Amazon VPC API is a subset of the Amazon EC2 API.

11/13/2013
Amazon WAF Logging Amazon WAF API Calls with Amazon CloudTrail 04/28/2016
Amazon Well-Architected Tool Logging Amazon Well-Architected Tool API Calls with Amazon CloudTrail 12/15/2020
Amazon WorkDocs Logging Amazon WorkDocs API Calls By Using Amazon CloudTrail 08/27/2014
Amazon WorkLink Logging Amazon WorkLink API Calls with Amazon CloudTrail 01/23/2019
Amazon WorkMail Logging Amazon WorkMail API Calls Using Amazon CloudTrail 12/12/2017
WorkSpaces Logging Amazon WorkSpaces API Calls by Using CloudTrail 04/09/2015
Amazon X-Ray Logging Amazon X-Ray API Calls With CloudTrail 04/25/2018