Menu
AWS CloudTrail
User Guide (Version 1.0)

CloudTrail Supported Services

CloudTrail supports the following services:

Analytics

Amazon CloudSearch

Amazon CloudSearch is a fully-managed service in the cloud that makes it easy to set up, manage, and scale a search solution for your website. Amazon CloudSearch enables you to search large collections of data such as web pages, document files, forum posts, or product information. For more information, see the Amazon CloudSearch Developer Guide. For information about the Amazon CloudSearch calls logged by CloudTrail, see Logging Amazon CloudSearch Configuration Service Calls Using AWS CloudTrail.

Support began 10/16/2014

Amazon EMR

Amazon EMR (Amazon EMR) is a web service that makes it easy to process large amounts of data efficiently. Amazon EMR uses Hadoop processing combined with several services from AWS to perform such tasks as web indexing, data mining, log file analysis, machine learning, scientific simulation, and data warehousing. For more information, see the Amazon EMR Developer Guide. For information about the Amazon EMR calls logged by CloudTrail, see Logging Amazon EMR API Calls in AWS CloudTrail.

Support began 04/04/2014

AWS Data Pipeline

AWS Data Pipeline is a web service that you can use to automate the movement and transformation of data through data-driven workflows. For more information, see the AWS Data Pipeline Developer Guide. For information about the AWS Data Pipeline calls logged by CloudTrail, see Logging AWS Data Pipeline API Calls by Using AWS CloudTrail.

Support began 12/02/2014

Amazon Kinesis Firehose

Amazon Kinesis Firehose is a fully managed service for delivering real-time streaming data to destinations such as Amazon S3 and Amazon Redshift. Firehose is part of the Amazon Kinesis streaming data family, along with Amazon Kinesis Streams. For more information, see the Amazon Kinesis Firehose Developer Guide. For information about the Firehose calls logged by CloudTrail, see Monitoring Amazon Kinesis Firehose API Calls with AWS CloudTrail.

Support began 03/17/2016

Amazon Kinesis Streams

Amazon Kinesis Streams is a managed service that scales elastically for real-time processing of streaming big data. The service takes in large streams of data records that can then be consumed in real time by multiple data-processing applications that can be run on Amazon EC2 instances. For more information, see the Amazon Kinesis Streams Developer Guide. For information about the Streams calls logged by CloudTrail, see Logging Amazon Kinesis Streams API Calls Using AWS CloudTrail.

Support began 04/25/2014

Application Services

Amazon API Gateway

Amazon API Gateway helps developers deliver robust, reliable, secure and scalable access to backend APIs for mobile apps, web apps, and server apps. For more information, see the API Gateway Developer Guide. For information about the Amazon API Gateway calls logged by CloudTrail, see Log API management calls to Amazon API Gateway Using AWS CloudTrail.

Support began 07/09/2015

Amazon Elastic Transcoder

Amazon Elastic Transcoder lets you convert media files that you have stored in Amazon S3 into media files in the formats required by consumer playback devices. For more information, see the Amazon Elastic Transcoder Developer Guide. For information about the Elastic Transcoder calls logged by CloudTrail, see Logging Elastic Transcoder API Calls Using CloudTrail.

Support began 10/27/2014

Amazon Elasticsearch Service

Amazon Elasticsearch Service is a managed service that makes it easy to deploy, operate, and scale Amazon ES in the AWS cloud. For more information, see the Amazon Elasticsearch Service Developer Guide. For information about the Amazon ES API calls logged by CloudTrail, see Auditing Amazon Elasticsearch Service Domains with AWS CloudTrail.

Support began 10/01/2015

Amazon Simple Workflow Service

Amazon Simple Workflow Service (Amazon SWF) makes it easy to build applications that coordinate work across distributed components. Amazon SWF gives you full control over implementing tasks and coordinating them without worrying about underlying complexities such as tracking their progress and maintaining their state. For more information, see the Amazon Simple Workflow Service Developer Guide. For information about the Amazon SWF calls logged by CloudTrail, see Logging Amazon Simple Workflow Service API Calls with AWS CloudTrail.

Support began 05/13/2014

AWS Step Functions

AWS Step Functions enables you to coordinate a network of computing resources across distributed components using state machines. You define state machines consisting of states that perform units of work, or tasks. Tasks are invocations of your resources. They report their results, along with success, failure, or heartbeat notifications back to Step Functions. By following the logic flow expressed in your state machine definition, Step Functions coordinates when tasks are run, and passes data between the tasks. For more information, see the AWS Step Functions Developer Guide. For information about the AWS Step Functions calls logged by CloudTrail, see Logging AWS Step Functions API Calls with AWS CloudTrail.

Support began 12/01/2016

Artificial Intelligence

Amazon Machine Learning

Amazon Machine Learning makes it easy for developers to build smart applications, including applications for fraud detection, demand forecasting, targeted marketing, and click prediction. The powerful algorithms of Amazon Machine Learning create machine learning (ML) models by finding patterns in your existing data. For more information, see the Amazon Machine Learning Developer Guide. For information about the Amazon ML API calls logged by CloudTrail, see Logging Amazon ML API Calls By Using AWS CloudTrail.

Support began 12/10/2015

Amazon Polly

Amazon Polly is a service that converts text into lifelike speech. You can use Amazon Polly to develop applications that increase engagement and accessibility. For more information, see the Amazon Polly Developer Guide. For information about the Amazon Polly calls logged by CloudTrail, see Logging Amazon Polly API Calls with AWS CloudTrail.

Support began 11/30/2016

Business Productivity

Amazon WorkDocs

Amazon WorkDocs is a fully managed enterprise storage and sharing service. Your files are stored in the cloud safely and securely.

For more information, see Amazon WorkDocs Administration Guide. For information about the Amazon WorkDocs actions logged by CloudTrail, see Logging Amazon WorkDocs API Calls Using AWS CloudTrail.

Support began 08/27/2014

Compute

Application Auto Scaling

With Application Auto Scaling, you can automatically scale your AWS resources. The experience is similar to that of Auto Scaling. You can use Application Auto Scaling to define scaling policies to automatically scale your AWS resources, scale your resources in response to Amazon CloudWatch alarms, and view the history of your scaling events. For more information, see the Application Auto Scaling API Reference. For information about the Application Auto Scaling calls logged by CloudTrail, see Logging Application Auto Scaling API calls with AWS CloudTrail

Support began 10/31/2016

Auto Scaling

Auto Scaling is a web service that enables you to automatically launch or terminate Amazon Elastic Compute Cloud (Amazon EC2) instances based on user-defined policies, health status checks, and schedules. For more information, see the Auto Scaling User Guide. For information about the Auto Scaling calls logged by CloudTrail, see Logging Auto Scaling API Calls By Using CloudTrail.

Support began 07/16/2014

Amazon EC2 Container Registry

Amazon EC2 Container Registry (Amazon ECR) is a secure and scalable managed AWS Docker registry service. Amazon ECR supports private Docker repositories with resource-level permissions. You can use the Docker CLI to author, push, pull, and manage images. For more information, see the Amazon EC2 Container Registry User Guide. For information about the Amazon ECR calls logged by CloudTrail, see Logging Amazon ECR API Calls By Using AWS CloudTrail.

Support began 12/21/2015

Amazon EC2 Container Service

Amazon EC2 Container Service (Amazon ECS) is a highly scalable, fast, container management service that makes it easy to run, stop, and manage Docker containers on a cluster of Amazon EC2 instances. For more information, see the Amazon EC2 Container Service Developer Guide. For information about the Amazon ECS calls logged by CloudTrail, see Logging Amazon ECS API Calls By Using AWS CloudTrail.

Support began 04/09/2015

AWS Elastic Beanstalk

You can use Elastic Beanstalk to quickly deploy and manage applications in the AWS cloud without worrying about the infrastructure that runs those applications. For more information, see the AWS Elastic Beanstalk Developer Guide. For information about the Elastic Beanstalk calls logged by CloudTrail, see Using AWS Elastic Beanstalk with AWS CloudTrail.

Support began 03/31/2014

Amazon Elastic Compute Cloud

Amazon EC2 (Amazon EC2) provides resizeable computing capacity in the AWS cloud. You can launch as many or as few virtual servers as you need, configure security and networking, and manage storage. Amazon EC2 can also scale up or down quickly to handle changes in requirements or spikes in popularity, thereby reducing your need to forecast server traffic.

For more information, see the Amazon EC2 User Guide for Linux Instances. For information about the Amazon EC2 calls logged by CloudTrail, see Logging API Calls Using AWS CloudTrail.

Amazon EC2 Systems Manager (SSM) is a feature of EC2Config that enables you to manage the configuration of running Windows instances. For information about the Amazon EC2 Systems Manager API calls logged by CloudTrail, see Logging SSM API Calls Using AWS CloudTrail.

Support began 11/13/2013

Elastic Load Balancing

You can use Elastic Load Balancing to automatically distribute your incoming application traffic across multiple Amazon EC2 instances. Elastic Load Balancing automatically scales request handling capacity in response to incoming traffic. For more information, see the Elastic Load Balancing User Guide. For information about the Elastic Load Balancing calls logged by CloudTrail, see AWS CloudTrail Logging for Your Classic Load Balancer and AWS CloudTrail Logging for Your Application Load Balancer.

Support began 04/04/2014

AWS Lambda

AWS Lambda is a zero-administration compute platform that runs your code in the AWS Cloud, providing the high availability, security, performance, and scalability of AWS infrastructure. For more information, see the AWS Lambda Developer Guide. For information about the Lambda calls logged by CloudTrail, see Logging AWS Lambda API Calls By Using AWS CloudTrail.

Support began 04/09/2015

Amazon Lightsail

Amazon Lightsail helps developers quickly get started with virtual private servers. Lightsail includes everything you need to launch your project quickly – a virtual machine, SSD-based storage, data transfer, DNS management, and a static IP. For more information, see the Amazon Lightsail Developer Guide. For information about the Lightsail calls logged by CloudTrail, see Logging Lightsail API Calls with AWS CloudTrail.

Support began 12/23/2016

Database

Amazon DynamoDB

Amazon DynamoDB is a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability. For more information, see the Amazon DynamoDB Developer Guide. For information about the DynamoDB calls logged by CloudTrail, see Logging DynamoDB Operations By Using AWS CloudTrail.

Support began 05/28/2015

Amazon ElastiCache

Amazon ElastiCache is a web service that makes it easy to set up, manage, and scale distributed in-memory cache environments in the cloud. It provides a high performance, resizeable, and cost-effective in-memory cache, while removing the complexity associated with deploying and managing a distributed cache environment. For more information, see the Amazon ElastiCache User Guide. For information about the ElastiCache calls logged by CloudTrail, see Logging Amazon ElastiCache API Calls Using AWS CloudTrail.

Support began 09/15/2014

Amazon Redshift

Amazon Redshift is a fast, fully managed, petabyte-scale data warehouse service that makes it simple and cost-effective to efficiently analyze all your data by using your existing business intelligence tools. It is optimized for datasets that range from a few hundred gigabytes to a petabyte or more. For more information, see the Amazon Redshift Database Developer Guide. For the list of Amazon Redshift calls logged by CloudTrail, see the Amazon Redshift API Reference.

Support began 06/10/2014

Amazon Relational Database Service

Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in the cloud. It provides cost-efficient, resizeable capacity for an industry-standard relational database and manages common database administration tasks. For more information, see the Amazon Relational Database Service User Guide. For information about the Amazon RDS calls logged by CloudTrail, see Logging Amazon RDS API Calls Using AWS CloudTrail.

Support began 11/13/2013

Desktop & App Streaming

Amazon WorkSpaces

Amazon WorkSpaces offers an easy way to provide a cloud-based desktop experience to your end-users. A choice of bundles offer a range of different amounts of CPU, memory, storage, and a choice of applications. Users can connect from a PC, Mac desktop computer, iPad, Kindle, or Android tablet. For more information, see the Amazon WorkSpaces Administration Guide. For information about the Amazon WorkSpaces actions logged by CloudTrail, see Logging Amazon WorkSpaces API Calls by Using CloudTrail.

Support began 04/09/2015

Developer Tools

AWS CodeBuild

AWS CodeBuild is a fully managed build service in the cloud. AWS CodeBuild compiles your source code, runs unit tests, and produces artifacts that are ready to deploy. For more information, see the AWS CodeBuild User Guide. For information about the AWS CodeBuild calls logged by CloudTrail, see Logging AWS CodeBuild API Calls with AWS CloudTrail.

Support began 12/01/2016

AWS CodeCommit

AWS CodeCommit is a version control service hosted by AWS that you can use to privately store and manage assets (such as documents, source code, and binary files) in the cloud. For more information, see the AWS CodeCommit User Guide. For information about the AWS CodeCommit calls logged by CloudTrail, see Logging AWS CodeCommit API Calls with AWS CloudTrail.

Support began 01/11/2017

AWS CodeDeploy

AWS CodeDeploy is a deployment service that enables developers to automate the deployment of applications to Amazon Elastic Compute Cloud (Amazon EC2) instances, and to update the applications as required. For more information, see the AWS CodeDeploy User Guide. For information about the AWS CodeDeploy calls logged by CloudTrail, see Monitoring Deployments with AWS CloudTrail.

Support began 12/16/2014

AWS CodePipeline

AWS CodePipeline is a continuous delivery and automation service hosted by Amazon Web Services that enables you to model, configure, and automate the steps required to release your software. For more information, see the AWS CodePipeline User Guide. For information about the AWS CodePipeline calls logged by CloudTrail, see Logging AWS CodePipeline API Calls with AWS CloudTrail.

Support began 07/09/2015

Game Development

Amazon GameLift

Amazon GameLift is a fully managed service for deploying, operating, and scaling session-based multiplayer game servers in the cloud. You can deploy your first game server in the cloud in just minutes, eliminating up to thousands of hours in upfront software development. For more information about GameLift, see the Amazon GameLift Developer Guide. For information about the GameLift calls logged by CloudTrail, see Logging Amazon GameLift API Calls with AWS CloudTrail.

Support began 01/27/2016

Internet of Things

AWS IoT

AWS IoT provides secure, bi-directional communication between Internet-connected things (such as sensors, actuators, embedded devices, or smart appliances) and the AWS cloud. This enables you to collect telemetry data from multiple devices and store and analyze the data. For more information, see the AWS IoT Developer Guide. For information about the AWS IoT calls logged by CloudTrail, see Logging AWS IoT API calls with AWS CloudTrail.

Support began 04/11/2016

Management Tools

AWS Application Discovery Service

AWS Application Discovery Service helps you plan application migration projects by automatically identifying servers, virtual machines (VMs), software, and software dependencies running in your on-premises data centers. For more information, see the Application Discovery Service User Guide.

All Application Discovery Service actions are logged. For more information, see the Application Discovery Service API Reference.

Support began 05/12/2016

AWS CloudFormation

AWS CloudFormation enables you to create and provision AWS infrastructure deployments predictably and repeatedly. It helps you leverage AWS products such as Amazon EC2, Amazon EBS, Amazon SNS, Elastic Load Balancing, and Auto Scaling to build highly reliable, highly scalable, cost-effective applications without worrying about creating and configuring the underlying AWS infrastructure.

For more information, see the AWS CloudFormation User Guide. For information about the AWS CloudFormation calls logged by CloudTrail, see Logging AWS CloudFormation API Calls in AWS CloudTrail.

Support began 04/02/2014

AWS CloudTrail

Like any supported service, when logging is turned on, CloudTrail logs actions to an Amazon S3 bucket that you specify. All CloudTrail actions are logged. See the AWS CloudTrail API Reference.

Support began 11/13/2013

Amazon CloudWatch

Amazon CloudWatch monitors your AWS resources and the applications you run on AWS in real time. You can use CloudWatch to collect and track metrics which are the variables you want to measure for your resources and applications. CloudWatch alarms send notifications or automatically make changes to the resources you are monitoring based on rules that you define. For more information, see the Amazon CloudWatch User Guide. For information about the CloudWatch calls logged by CloudTrail, see Logging Amazon CloudWatch API Calls in AWS CloudTrail.

Support began 04/30/2014

Amazon CloudWatch Events

Amazon CloudWatch Events delivers a timely stream of system events that describe changes in AWS resources to AWS Lambda functions, streams in Amazon Kinesis Streams, Amazon SNS topics, or built-in targets. Using simple rules that you can set up quickly, you can match events and route them to one or more target functions or streams. For more information, see the Amazon CloudWatch Events User Guide. For information about the CloudWatch calls logged by CloudTrail, see Logging Amazon CloudWatch Events API Calls in AWS CloudTrail.

Support began 01/16/2016

Amazon CloudWatch Logs

Amazon CloudWatch Logs monitors, stores, and accesses your log files from Amazon EC2 instances, AWS CloudTrail, and other sources. You can then retrieve the associated log data from CloudWatch Logs. For more information, see the Amazon CloudWatch Logs User Guide. For information about the CloudWatch Logs calls logged by CloudTrail, see Logging Amazon CloudWatch Logs API Calls in AWS CloudTrail.

Support began 03/10/2016

AWS Config

AWS Config provides a detailed view of the resources associated with your AWS account, including how they are configured, how they are related to one another, and how the configurations and their relationships have changed over time. For more information, see the AWS Config Developer Guide. For information about the AWS Config calls logged by CloudTrail, see Logging AWS Config API Calls with AWS CloudTrail.

Support began 02/10/2015

AWS Managed Services

AWS Managed Services provides ongoing management of your AWS infrastructure so you can focus on your applications. By implementing best practices to maintain your infrastructure, AWS Managed Services helps to reduce your operational overhead and risk. For more information, see AWS Managed Services.

Support began 12/21/2016

AWS OpsWorks

AWS OpsWorks provides a simple and flexible way to create and manage stacks and applications. It supports a standard set of components—including application servers, database servers, load balancers, and more—that you can use to assemble your stack. These components all come with a standard configuration and are ready to run. For more information, see the AWS OpsWorks User Guide. For information about the AWS OpsWorks calls logged by CloudTrail, see Logging AWS OpsWorks API Calls By Using AWS CloudTrail.

Support began 06/04/2014

AWS OpsWorks for Chef Automate

AWS OpsWorks for Chef Automate lets you run a Chef Automate server in AWS. You can provision a Chef server within minutes, and let AWS OpsWorks Stacks handle its operations, backups, restorations, and software upgrades. For more information, see the AWS OpsWorks User Guide. For information about the AWS OpsWorks for Chef Automate calls logged by CloudTrail, see Logging AWS OpsWorks for Chef Automate API Calls with AWS CloudTrail.

Support began 11/23/2016

AWS Service Catalog

AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS. These IT services can include everything from virtual machine images, servers, software, and databases to complete multi-tier application architectures. For more information, see the AWS Service Catalog Developer Guide. For information about the AWS Service Catalog calls logged by CloudTrail, see Logging AWS Service Catalog API Calls with AWS CloudTrail.

Support began 07/06/2016

Messaging

Amazon Simple Email Service

Amazon Simple Email Service is an outbound-only email-sending service that provides an easy, cost-effective way for you to send email. For more information, see the Amazon Simple Email Service Developer Guide. For information about the Amazon SES calls logged by CloudTrail, see Logging Amazon SES API Calls By Using AWS CloudTrail.

Support began 05/07/2015

Amazon Simple Notification Service

Amazon Simple Notification Service (Amazon SNS) is a web service that coordinates and manages the delivery or sending of messages to subscribing endpoints or clients. For more information, see the Amazon Simple Notification Service Developer Guide. For information about the Amazon SNS calls logged by CloudTrail, see Logging Amazon Simple Notification Service API Calls By Using AWS CloudTrail.

Support began 10/09/2014

Amazon Simple Queue Service

Amazon Simple Queue Service (Amazon SQS) offers reliable and scalable hosted queues for storing messages as they travel between computers. By using Amazon SQS, you can move data between distributed components of your applications that perform different tasks without losing messages or requiring each component to be always available. For more information, see the Amazon Simple Queue Service Developer Guide. For information about the Amazon SQS calls logged by CloudTrail, see Logging Amazon SQS API Actions Using AWS CloudTrail.

Support began 07/16/2014

Migration

AWS Database Migration Service

AWS Database Migration Service (AWS DMS) can migrate your data to and from most widely used commercial and open-source databases such as Oracle, PostgreSQL, Microsoft SQL Server, Amazon Aurora, MariaDB, and MySQL. For more information, see the AWS Database Migration Service User Guide. For information about the AWS DMS calls logged by CloudTrail, see Logging AWS Database Migration Service API Calls Using AWS CloudTrail.

Support began 02/04/2016

AWS Server Migration Service

AWS Server Migration Service (AWS SMS) automates the migration of on-premises VMware virtual machines to the AWS Cloud and Amazon EC2. AWS SMS incrementally replicates your server VMs as cloud-hosted Amazon Machine Images (AMIs). Working with AMIs, you can test and update your replicated, cloud-based VMs before deploying them in production. All AWS SMS actions are logged. See the AWS SMS API Reference.

Support began 11/14/2016

Mobile Services

Amazon Cognito

Amazon Cognito is a service that you can use to create unique identities for your users, authenticate these identities with identity providers, and save mobile user data in the AWS Cloud. For more information, see the Amazon Cognito Developer Guide. For information about the Amazon Cognito calls logged by CloudTrail, see Logging Amazon Cognito API Calls with AWS CloudTrail..

Support began 02/18/2016

AWS Device Farm

AWS Device Farm is an app testing service that enables you to test your Android and Fire OS apps on real, physical phones and tablets that are hosted by AWS. For more information, see the Device Farm Developer Guide. For information about the AWS Device Farm calls logged by CloudTrail, see Logging AWS Device Farm API Calls By Using AWS CloudTrail.

Support began 07/13/2015

Networking & Content Delivery

Amazon CloudFront

Amazon CloudFront speeds up distribution of your static and dynamic web content to end users. CloudFront delivers your content through a worldwide network of edge locations. When an end user requests content that you're serving with CloudFront, the user is routed to the edge location that provides the lowest latency, so that content is delivered with the best possible performance. For more information, see the Amazon CloudFront Developer Guide. For information about the CloudFront calls logged by CloudTrail, see Using AWS CloudTrail to Capture Requests Sent to the CloudFront API.

Support began 05/28/2014

AWS Direct Connect

You can use AWS Direct Connect to establish a direct connection from your premises to AWS. This may reduce your network costs and increase bandwidth throughput. For more information, see the AWS Direct Connect User Guide. For information about the AWS Direct Connect calls logged by CloudTrail, see Logging AWS Direct Connect API Calls in AWS CloudTrail.

Support began 03/08/2014

Amazon Route 53

Amazon Route 53 is a Domain Name System (DNS) and domain name registration web service. To use Amazon Route 53 with CloudTrail, you must choose US East (N. Virginia) as the region when you create the trail. For more information, see the Amazon Route 53 Developer Guide. For information about the Amazon Route 53 calls logged by CloudTrail, see Using AWS CloudTrail to Capture Requests Sent to the Amazon Route 53 API.

Support began 02/11/2015

Amazon Virtual Private Cloud

Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you've defined. This virtual network closely resembles a traditional network that you would operate in your own data center with the added benefit of using the scalable AWS infrastructure. For more information, see the Amazon VPC User Guide. The Amazon VPC API is a subset of the Amazon EC2 API. For information about the Amazon EC2 calls logged by CloudTrail (including those for Amazon VPC), see Logging API Calls Using AWS CloudTrail.

Support began 11/13/2013

Security, Identity & Compliance

AWS Certificate Manager

AWS Certificate Manager (ACM) handles the complexity of provisioning, deploying, and managing certificates provided by ACM (ACM Certificates) for your AWS-based websites and applications. For more information, see the AWS Certificate Manager User Guide. For information about the ACM calls logged by CloudTrail, see Using AWS CloudTrail.

Support began 03/25/2016

Amazon Cloud Directory

Amazon Cloud Directory is a highly scalable, high performance, multitenant directory service in the cloud. Its web-based directories make it easy for you to organize and manage application resources such as users, groups, locations, devices, policies, and the rich relationships between them. Cloud Directory is a foundational building block for developers to create directory-based solutions easily and without having to worry about deployment, global scale, availability, and performance. For more information, see Amazon Cloud Directory in the AWS Directory Service Administration Guide.

For information about the Amazon Cloud Directory calls logged by CloudTrail, see Logging Cloud Directory API calls Using AWS CloudTrail.

Support began 01/26/2017

AWS CloudHSM

AWS CloudHSM provides secure cryptographic key storage to customers by making hardware security modules (HSMs) available in the AWS cloud. For more information, see the AWS CloudHSM User Guide. For information about the AWS CloudHSM calls logged by CloudTrail, see Logging AWS CloudHSM API Calls By Using AWS CloudTrail.

Support began 01/08/2015

AWS Directory Service

The AWS Directory Service is a managed service that makes it easy to connect to your existing on-premises Microsoft Active Directory and deploy and manage Windows workloads in the AWS cloud. For more information, see the AWS Directory Service Administration Guide. For information about the AWS Directory Service calls logged by CloudTrail, see Logging AWS Directory Service API Calls by Using CloudTrail.

Support began 05/14/2015

AWS Identity and Access Management

AWS Identity and Access Management (IAM) is a web service that enables AWS customers to manage users and user permissions. By using IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users can access. For more information, see the IAM User Guide. For information about the IAM calls logged by CloudTrail, see Logging IAM Events with AWS CloudTrail.

Support began 11/13/2013

Amazon Inspector

Amazon Inspector enables you to analyze the behavior of your AWS resources and helps you to identify potential security issues. With Amazon Inspector, you can define a collection of AWS resources that you want to include in an assessment target. For more information, see the Amazon Inspector User Guide. For information about the Amazon Inspector calls logged by CloudTrail, see Logging Amazon Inspector API calls with AWS CloudTrail.

Support began 04/20/2016

AWS Key Management Service

AWS Key Management Service is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. AWS KMS is integrated with other AWS services including Amazon EBS, Amazon S3, and Amazon Redshift. For more information, see the AWS Key Management Service Developer Guide. For information about the AWS KMS calls logged by CloudTrail, see Logging AWS KMS API Calls.

Support began 11/12/2014

AWS Security Token Service

You can use the AWS Security Token Service (AWS STS) to grant a trusted user temporary, limited access to your AWS resources. For more information, see Temporary Security Credentials in the IAM User Guide. For information about both the IAM and AWS STS calls logged by CloudTrail, see Logging IAM Events with AWS CloudTrail. For a complete list of AWS STS calls, see the AWS Security Token Service API Reference.

Support began 11/13/2013

AWS WAF

AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront and lets you control access to your content. For more information, see the AWS WAF Developer Guide. For information about the AWS WAF calls logged by CloudTrail, see Logging AWS WAF API Calls with AWS CloudTrail.

Support began 04/28/2016

Storage

Amazon Elastic Block Store

Amazon Elastic Block Store (Amazon EBS) allows you to create persistent storage volumes and attach them to Amazon EC2 instances. Once attached, you can create a file system on top of these volumes, run a database, or use them in any other way you would use a block device. For more information, see the Amazon EC2 User Guide for Linux Instances. For information about the Amazon EBS calls logged by CloudTrail, see Logging API Calls Using AWS CloudTrail.

Support began 11/13/2013

Amazon Elastic File System

Amazon Elastic File System (Amazon EFS) is a file storage service for Amazon Elastic Compute Cloud (Amazon EC2) instances. You can create and configure file systems quickly and easily with Amazon EFS. CloudTrail logs all Amazon EFS API actions. For more information, see the Amazon Elastic File System User Guide. For information about the Amazon EFS calls, see Amazon EFS API.

Support began 06/28/2016

Amazon Glacier

Amazon Glacier is a storage service optimized for data archiving and backup of infrequently used data. The service is durable, extremely low-cost, and includes security features. For more information, see the Amazon Glacier Developer Guide. For information about the Amazon Glacier calls logged by CloudTrail, see Logging Amazon Glacier API Calls By Using AWS CloudTrail.

Support began 12/11/2014

Amazon Simple Storage Service

You can use Amazon Simple Storage Service (Amazon S3) to store and retrieve any amount of data at any time, from anywhere on the web. You can also use CloudTrail logs together with Amazon S3 server access logs. For more information, see the Amazon Simple Storage Service Developer Guide.

CloudTrail logs Amazon S3 bucket level events such as the creating and deleting buckets, changes to bucket policy, and changes to replication status. You can also configure your trail to log object level events such as creating, updating, or deleting S3 objects in a bucket. For more information, see Logging Amazon S3 API Calls By Using AWS CloudTrail.

Support began 09/01/2015 for bucket level events

Support began 11/21/2016 for object level events

AWS Storage Gateway

AWS Storage Gateway is a service that connects an on-premises software appliance with cloud-based storage to provide seamless and secure integration between your on-premises IT environment and the AWS storage infrastructure in the cloud. For more information, see the AWS Storage Gateway User Guide. For information about the AWS Storage Gateway Volume Gateway calls logged by CloudTrail, see Logging AWS Storage Gateway API Calls by Using AWS CloudTrail.

Support began 12/16/2014

Support

AWS Personal Health Dashboard

AWS Health provides ongoing visibility into the state of your AWS resources, services, and accounts. The service gives you awareness and remediation guidance for resource performance or availability issues that may affect your applications that run on AWS. CloudTrail logs all AWS Health API operations. For more information, see the AWS Health User Guide. For information about AWS Health API calls logged by CloudTrail, see Logging AWS Health API Calls with AWS CloudTrail.

Support began 12/01/2016

AWS Support

AWS Support offers a range of plans that provide access to tools and expertise that support the success and operational health of your AWS solutions. All support plans provide 24x7 access to customer service, AWS documentation, whitepapers, and support forums. For more information, see the AWS Support User Guide. For information about the AWS Support API calls logged by CloudTrail, see Logging AWS Support API Calls with AWS CloudTrail.

Support began 04/21/2016