Menu
AWS CloudTrail
User Guide (Version 1.0)

Services Supported by CloudTrail Event History

You can look up event history in the supported regions for the following services. You can look up event history for create, modify, and delete API calls.

Note

Event history supports the following APIs. If you're looking for a specific API call that doesn't appear in the event history, create a trail and check the log files in your S3 bucket. For more information about logging for specific services see CloudTrail Supported Services.

To view API calls that are supported by the Event history feature, choose a service from the following list.

Auto Scaling APIs

AttachInstances
AttachLoadBalancers
CompleteLifecycleAction
CreateAutoScalingGroup
CreateLaunchConfiguration
CreateOrUpdateTags
DeleteAutoScalingGroup
DeleteLaunchConfiguration
DeleteLifecycleHook
DeleteNotificationConfiguration
DeletePolicy
DeleteScheduledAction
DeleteTags
DetachInstances
DetachLoadBalancers
DisableMetricsCollection
EnableMetricsCollection
EnterStandby
ExecutePolicy
ExitStandby
PutLifecycleHook
PutNotificationConfiguration
PutScalingPolicy
PutScheduledUpdateGroupAction
RecordLifecycleActionHeartbeat
ResumeProcesses
SetDesiredCapacity
SetInstanceHealth
SetInstanceProtection
SuspendProcesses
TerminateInstanceInAutoScalingGroup
UpdateAutoScalingGroup

For more information, see Logging Auto Scaling API Calls By Using CloudTrail in the Auto Scaling User Guide.

AWS Certificate Manager APIs

AddTagsToCertificate
DeleteCertificate
RemoveTagsFromCertificate
RequestCertificate
ResendValidationEmail

For more information, see Using AWS CloudTrail in the AWS Certificate Manager User Guide.

AWS CloudFormation APIs

CancelUpdateStack
CreateStack
DeleteStack
SetStackPolicy
SignalResource
UpdateStack

For more information, see Logging AWS CloudFormation API Calls in AWS CloudTrail in the AWS CloudFormation User Guide.

Amazon CloudFront APIs

CreateCloudFrontOriginAccessIdentity
CreateDistribution
CreateInvalidation
CreateStreamingDistribution
DeleteCloudFrontOriginAccessIdentity
DeleteDistribution
DeleteStreamingDistribution
UpdateCloudFrontOriginAccessIdentity
UpdateDistribution
UpdateStreamingDistribution

For more information, see Using AWS CloudTrail to Capture Requests Sent to the CloudFront API in the Amazon CloudFront Developer Guide.

AWS CloudHSM APIs

AdminCreateHsm
CreateCluster
CreateHapg
CreateHsm
CreateLunaClient
DeleteCluster
DeleteHapg
DeleteHsm
DeleteLunaClient
InitializeCluster
ModifyHapg
ModifyHsm
ModifyLunaClient

For more information, see Logging AWS CloudHSM API Calls By Using AWS CloudTrail in the AWS CloudHSM User Guide.

Amazon CloudSearch APIs

BuildSuggesters
CreateDomain
DefineAnalysisScheme
DefineExpression
DefineIndexField
DefineIndexFields
DefineRankExpression
DefineSuggester
DeleteAnalysisScheme
DeleteDomain
DeleteExpression
DeleteIndexField
DeleteRankExpression
DeleteSuggester
IndexDocuments
UpdateAvailabilityOptions
UpdateDefaultSearchField
UpdateScalingParameters
UpdateServiceAccessPolicies
UpdateStemmingOptions
UpdateStopwordOptions
UpdateSynonymOptions

For more information, see Logging Amazon CloudSearch Configuration Service Calls Using AWS CloudTrail in the Amazon CloudSearch Developer Guide.

AWS CloudTrail APIs

AddTags
CreateTrail
DeleteTrail
RemoveTags
StartLogging
StopLogging
UpdateTrail

Amazon CloudWatch APIs

Amazon CloudWatch

DeleteAlarms
DisableAlarmActions
EnableAlarmActions
PutMetricAlarm
SetAlarmState

Amazon CloudWatch Events

DeleteRule
DisableRule
EnableRule
PutRule
PutTargets
RemoveTargets

Amazon CloudWatch Logs

CancelExportTask
CreateExportTask
CreateLogGroup
CreateLogStream
DeleteDestination
DeleteLogGroup
CreateLogStream
DeleteMetricFilter
DeleteRetentionPolicy
DeleteSubscriptionFilter
PutDestination
PutDestinationPolicy
PutMetricFilter
PutRetentionPolicy
PutSubscriptionFilter

For more information, see Logging Amazon CloudWatch API Calls in AWS CloudTrail in the Amazon CloudWatch User Guide.

AWS CodeCommit APIs

CreateBranch
CreateRepository
DeleteRepository
PutRepositoryTriggers
TestRepositoryTriggers
UpdateDefaultBranch
UpdateRepositoryDescription
UpdateRepositoryName

For information about the AWS CodeCommit calls logged by CloudTrail, see Logging AWS CodeCommit API Calls with AWS CloudTrail in the AWS CodeCommit User Guide.

AWS CodeDeploy APIs

AddTagsToOnPremisesInstances
CreateApplication
CreateDeployment
CreateDeploymentConfig
CreateDeploymentGroup
DeleteApplication
DeleteDeploymentConfig
DeleteDeploymentGroup
DeregisterOnPremisesInstance
RegisterApplicationRevision
RegisterOnPremisesInstance
StopDeployment
UpdateApplication
UpdateDeploymentGroup

For more information, see Monitoring Deployments with AWS CloudTrail in the AWS CodeDeploy User Guide.

AWS CodePipeline APIs

AcknowledgeJob
AcknowledgeThirdPartyJob
CreateCustomActionType
CreatePipeline
DeleteCustomActionType
DeletePipeline
DisableStageTransition
EnableStageTransition
PutActionRevision
PutApprovalResult
PutJobFailureResult
PutJobSuccessResult
PutThirdPartyJobFailureResult
PutThirdPartyJobSuccessResult
RetryStageExecution
StartPipelineExecution
UpdatePipeline

For more information,see Logging AWS CodePipeline API Calls with AWS CloudTrail in the AWS CodePipeline User Guide.

Amazon Cognito Identity APIs

CreateIdentityPool
DeleteIdentities
DeleteIdentityPool
GetOpenIdTokenForDeveloperIdentity
MergeDeveloperIdentities
SetIdentityPoolRoles
UnlinkDeveloperIdentity
UpdateIdentityPool

For more information, see the Logging Amazon Cognito API Calls with AWS CloudTrail in the Amazon Cognito Developer Guide.

Amazon Cognito Sync APIs

SetCognitoEvents
SetIdentityPoolConfiguration

For more information, see the Logging Amazon Cognito API Calls with AWS CloudTrail in the Amazon Cognito Developer Guide.

Amazon Cognito Your User Pools APIs

AddCustomAttributes
AdminConfirmSignUp
AdminDeleteUser
AdminDeleteUserAttributes
AdminDisableUser
AdminRemoveUserFromGroup
AdminResetUserPassword
AdminSetUserSettings
AdminUpdateUserAttributes
CreateGroup
CreateUserPool
CreateUserPoolClient
DeleteGroup
DeleteUserPool
DeleteUserPoolClient
UpdateGroup
UpdateUserPool
UpdateUserPoolClient

For more information, see the Logging Amazon Cognito API Calls with AWS CloudTrail in the Amazon Cognito Developer Guide.

AWS Config APIs

DeleteConfigRule
DeleteDeliveryChannel
PutConfigurationRecorder
PutConfigRule
PutDeliveryChannel
PutEvaluations
StartConfigurationRecorder
StopConfigurationRecorder

For more information, see Logging AWS Config API Calls By Using AWS CloudTrail in the AWS Config Developer Guide.

AWS Data Pipeline APIs

ActivatePipeline
AddTags
CreatePipeline
DeactivatePipeline
DeletePipeline
PutPipelineDefinition
RemoveTags
SetStatus

For more information, see Logging AWS Data Pipeline API Calls by using AWS CloudTrail in the AWS Data Pipeline Developer Guide.

AWS Direct Connect APIs

AllocateConnectionOnInterconnect
AllocateHostedConnection
AllocatePrivateVirtualInterface
AllocatePublicVirtualInterface
AssociateConnectionWithLag
AssociateHostedConnection
AssociateVirtualInterface
ConfirmConnection
ConfirmPrivateVirtualInterface
ConfirmPublicVirtualInterface
CreateConnection
CreateInterconnect
CreateLag
CreatePrivateVirtualInterface
CreatePublicVirtualInterface
DeleteConnection
DeleteInterconnect
DeleteLag
DeleteVirtualInterface
DisassociateConnectionFromLag
UpdateLag

For more information, see Logging AWS Direct Connect API Calls in AWS CloudTrail in the AWS Direct Connect User Guide.

Amazon DynamoDB APIs

CreateTable
DeleteTable
PurchaseReservedCapacityOfferings
UpdateTable

For more information, see Logging DynamoDB Operations By Using AWS CloudTrail in the Amazon DynamoDB Developer Guide.

Amazon DynamoDB Accelerator (DAX) APIs

CreateCluster
CreateParameterGroup
CreateSubnetGroup
DecreaseReplicationFactor
DeleteCluster
DeleteParameterGroup
DeleteSubnetGroup
IncreaseReplicationFactor
RebootNode
TagResource
UntagResource
UpdateCluster
UpdateParameterGroup
UpdateSubnetGroup

For more information, see the DAX API Reference.

Amazon EC2 APIs

AcceptReservedInstancesExchangeQuote
AcceptVpcPeeringConnection
AllocateAddress
AllocateHosts
AssignIpv6Addresses
AssignPrivateIpAddresses
AssociateAddress
AssociateDhcpOptions
AssociateIamInstanceProfile
AssociateRouteTable
AssociateSubnetCidrBlock
AssociateVpcCidrBlock
AttachClassicLinkVpc
AttachInternetGateway
AttachNetworkInterface
AttachVolume
AttachVpnGateway
AuthorizeSecurityGroupEgress
AuthorizeSecurityGroupIngress
BundleInstance
CancelBundleTask
CancelConversionTask
CancelExportTask
CancelImportTask
CancelReservedInstancesListing
CancelSpotInstanceRequests
CopyImage
CopySnapshot
CreateCustomerGateway
CreateDhcpOptions
CreateEgressOnlyInternetGateway
CreateImage
CreateInstanceExportTask
CreateInternetGateway
CreateKeyPair
CreateNatGateway
CreateNetworkAcl
CreateNetworkAclEntry
CreateNetworkInterface
CreatePlacementGroup
CreateReservedInstancesListing
CreateRoute
CreateRouteTable
CreateSecurityGroup
CreateSnapshot
CreateSpotDatafeedSubscription
CreateSubnet
CreateTags
CreateVolume
CreateVpc
CreateVpcEndpoint
CreateVpcPeeringConnection
CreateVpnConnection
CreateVpnConnectionRoute
CreateVpnGateway
DeleteCustomerGateway
DeleteDhcpOptions
DeleteEgressOnlyInternetGateway
DeleteInternetGateway
DeleteKeyPair
DeleteNatGateway
DeleteNetworkAcl
DeleteNetworkAclEntry
DeleteNetworkInterface
DeletePlacementGroup
DeleteRoute
DeleteRouteTable
DeleteSecurityGroup
DeleteSnapshot
DeleteSpotDatafeedSubscription
DeleteSubnet
DeleteTags
DeleteVolume
DeleteVpc
DeleteVpcEndpoints
DeleteVpcPeeringConnection
DeleteVpnConnection
DeleteVpnConnectionRoute
DeleteVpnGateway
DeregisterImage
DetachClassicLinkVpc
DetachInternetGateway
DetachNetworkInterface
DetachVolume
DetachVpnGateway
DisableVgwRoutePropagation
DisableVpcClassicLink
DisassociateAddress
DisassociateIamInstanceProfile
DisassociateRouteTable
DisassociateSubnetCidrBlock
DisassociateVpcCidrBlock
EnableVgwRoutePropagation
EnableVolumeIO
EnableVpcClassicLink
ImportImage
ImportInstance
ImportKeyPair
ImportSnapshot
ImportVolume
ModifyHosts
ModifyIdentityIdFormat
ModifyImageAttribute
ModifyInstanceAttribute
ModifyInstancePlacement
ModifyNetworkInterfaceAttribute
ModifyReservedInstances
ModifySnapshotAttribute
ModifySubnetAttribute
ModifyVolume
ModifyVolumeAttribute
ModifyVpcAttribute
ModifyVpcEndpoint
MonitorInstances
MoveAddressToVpc
PurchaseHostReservation
PurchaseReservedInstancesOffering
RebootInstances
RegisterImage
RejectVpcPeeringConnection
ReleaseAddress
ReleaseHosts
ReplaceIamInstanceProfileAssociation
ReplaceNetworkAclAssociation
ReplaceNetworkAclEntry
ReplaceRoute
ReplaceRouteTableAssociation
RequestSpotInstances
ResetImageAttribute
ResetInstanceAttribute
ResetNetworkInterfaceAttribute
ResetSnapshotAttribute
RestoreAddressToClassic
RevokeSecurityGroupEgress
RevokeSecurityGroupIngress
RunInstances
StartInstances
StopInstances
TerminateInstances
UnassignIpv6Addresses
UnassignPrivateIpAddresses
UnmonitorInstances

For more information, see Logging API Calls Using AWS CloudTrail in the Amazon EC2 API Reference.

AWS Elastic Beanstalk APIs

AbortEnvironmentUpdate
CreateApplication
CreateApplicationVersion
CreateConfigurationTemplate
CreateEnvironment
CreateStorageLocation
DeleteApplication
DeleteApplicationVersion
DeleteConfigurationTemplate
DeleteEnvironmentConfiguration
RebuildEnvironment
RestartAppServer
SwapEnvironmentCNAMEs
TerminateEnvironment
UpdateApplication
UpdateApplicationVersion
UpdateConfigurationTemplate
UpdateEnvironment

For more information, see Using AWS Elastic Beanstalk with AWS CloudTrail in the AWS Elastic Beanstalk Developer Guide.

Amazon Elastic File System APIs

CreateFileSystem
CreateMountTarget
CreateTags
DeleteFileSystem
DeleteMountTarget
DeleteTags
ModifyMountTargetSecurityGroups

For information about the Amazon EFS calls logged by CloudTrail, see Logging Amazon EFS API Calls with AWS CloudTrail.

Elastic Load Balancing APIs

AddTags
ApplySecurityGroupsToLoadBalancer
AttachLoadBalancerToSubnets
ConfigureHealthCheck
CreateAppCookieStickinessPolicy
CreateLBCookieStickinessPolicy
CreateListener
CreateLoadBalancer
CreateLoadBalancerListeners
CreateLoadBalancerPolicy
CreateRule
CreateTargetGroup
DeleteListener
DeleteLoadBalancer
DeleteLoadBalancerListeners
DeleteLoadBalancerPolicy
DeleteRule
DeleteTargetGroup
DeregisterInstancesFromLoadBalancer
DeregisterTargets
DetachLoadBalancerFromSubnets
DisableAvailabilityZonesForLoadBalancer
EnableAvailabilityZonesForLoadBalancer
ModifyListener
ModifyLoadBalancerAttributes
ModifyRule
ModifyTargetGroup
ModifyTargetGroupAttributes
RegisterInstancesWithLoadBalancer
RegisterTargets
RemoveTags
SetLoadBalancerListenerSSLCertificate
SetLoadBalancerPoliciesForBackendServer
SetLoadBalancerPoliciesOfListener
SetRulePriorities
SetSecurityGroups
SetSubnets

For more information, see Logging Elastic Load Balancing API Calls Using AWS CloudTrail in the Elastic Load Balancing User Guide.

Amazon EMR APIs

AddInstanceGroups
AddJobFlowSteps
AddTags
CreateSecurityConfiguration
DeleteSecurityConfiguration
ModifyInstanceGroups
RemoveTags
RunJobFlow
SetTerminationProtection
SetVisibleToAllUsers
TerminateJobFlows

For more information, see Logging Amazon EMR API Calls in AWS CloudTrail in the Amazon EMR Developer Guide.

Amazon Elastic Transcoder APIs

CancelJob
CreateJob
CreatePipeline
CreatePreset
DeletePipeline
DeletePreset
TestRole
UpdatePipeline
UpdatePipelineNotifications
UpdatePipelineStatus

For more information, see Logging Elastic Transcoder API Calls Using CloudTrail in the Amazon Elastic Transcoder Developer Guide.

Amazon ElastiCache APIs

AddTagsToResource
AuthorizeCacheSecurityGroupIngress
CopySnapshot
CreateCacheCluster
CreateCacheParameterGroup
CreateCacheSecurityGroup
CreateCacheSubnetGroup
CreateReplicationGroup
CreateSnapshot
DeleteCacheCluster
DeleteCacheParameterGroup
DeleteCacheSecurityGroup
DeleteCacheSubnetGroup
DeleteReplicationGroup
DeleteSnapshot
ModifyCacheCluster
ModifyCacheParameterGroup
ModifyCacheSubnetGroup
ModifyReplicationGroup
PurchaseReservedCacheNodesOffering
RebootCacheCluster
RemoveTagsFromResource
ResetCacheParameterGroup
RevokeCacheSecurityGroupIngress

For more information, see Logging Amazon ElastiCache API Calls Using AWS CloudTrail in the Amazon ElastiCache User Guide.

Amazon GameLift APIs

CreateAlias
CreateBuild
CreateFleet
CreateGameSession
CreatePlayerSession
CreatePlayerSessions
DeleteAlias
DeleteBuild
DeleteFleet
UpdateAlias
UpdateBuild
UpdateFleetAttributes
UpdateFleetCapacity
UpdateFleetPortSettings
UpdateGameSession

For information about the GameLift calls logged by CloudTrail, see Logging Amazon GameLift API Calls with AWS CloudTrail in the Amazon GameLift Developer Guide.

Amazon Glacier APIs

AbortVaultLock
AddTagsToVault
CompleteVaultLock
CreateVault
DeleteVault
DeleteVaultAccessPolicy
DeleteVaultNotifications
InitiateVaultLock
RemoveTagsFromVault
SetDataRetrievalPolicy
SetVaultAccessPolicy
SetVaultNotifications

For more information, see Logging Amazon Glacier API Calls By Using AWS CloudTrail in the Amazon Glacier Developer Guide.

AWS Identity and Access Management APIs

AddClientIDToOpenIDConnectProvider
AddRoleToInstanceProfile
AddUserToGroup
AttachGroupPolicy
AttachRolePolicy
AttachUserPolicy
ChangePassword
CreateAccessKey
CreateAccountAlias
CreateGroup
CreateInstanceProfile
CreateLoginProfile
CreateOpenIDConnectProvider
CreatePolicy
CreatePolicyVersion
CreateRole
CreateSAMLProvider
CreateUser
CreateVirtualMFADevice
DeactivateMFADevice
DeleteAccessKey
DeleteAccountAlias
DeleteAccountPasswordPolicy
DeleteGroup
DeleteGroupPolicy
DeleteInstanceProfile
DeleteLoginProfile
DeleteOpenIDConnectProvider
DeletePolicy
DeletePolicyVersion
DeleteRole
DeleteRolePolicy
DeleteSAMLProvider
DeleteServerCertificate
DeleteSigningCertificate
DeleteSSHPublicKey
DeleteUser
DeleteUserPolicy
DeleteVirtualMFADevice
DetachGroupPolicy
DetachRolePolicy
DetachUserPolicy
EnableMFADevice
PutGroupPolicy
PutRolePolicy
PutUserPolicy
RemoveClientIDFromOpenIDConnectProvider
RemoveRoleFromInstanceProfile
RemoveUserFromGroup
ResyncMFADevice
SetDefaultPolicyVersion
UpdateAccessKey
UpdateAccountPasswordPolicy
UpdateAssumeRolePolicy
UpdateGroup
UpdateLoginProfile
UpdateOpenIDConnectProviderThumbprint
UpdateSAMLProvider
UpdateServerCertificate
UpdateSigningCertificate
UpdateSSHPublicKey
UpdateUser
UploadServerCertificate
UploadSigningCertificate
UploadSSHPublicKey

For more information, see Logging IAM Events with AWS CloudTrail in the IAM User Guide.

AWS Import/Export APIs

CancelJob
CreateJob
UpdateJob

For more information, see the AWS Import/Export API Reference.

Amazon Inspector APIs

AddAttributesToFindings
CreateAssessmentTarget
CreateAssessmentTemplate
CreateResourceGroup
DeleteAssessmentRun
DeleteAssessmentTarget
DeleteAssessmentTemplate
RegisterCrossAccountAccessRole
RemoveAttributesFromFindings
SetTagsForResource
StartAssessmentRun
StopAssessmentRun
SubscribeToEvent
UnsubscribeFromEvent
UpdateAssessmentTarget

For more information, see Logging Amazon Inspector API calls with AWS CloudTrail in the Amazon Inspector User Guide.

AWS IoT APIs

AcceptCertificateTransfer
AttachPrincipalPolicy
AttachThingPrincipal
CancelCertificateTransfer
CreateCertificateFromCSR
CreateKeysAndCertificate
CreatePolicy
CreatePolicyVersion
CreateThing
CreateTopicRule

DeleteCACertificate

DeleteCertificate
DeletePolicy
DeletePolicyVersion

DeleteRegistrationCode

DeleteThing
DeleteTopicRule
DetachPrincipalPolicy
DetachThingPrincipal
DisableTopicRule
EnableTopicRule

RegisterCACertificate

RegisterCertificate

RejectCertificateTransfer
ReplaceTopicRule
SetDefaultPolicyVersion
SetLoggingOptions
TransferCertificate

UpdateCACertificate

UpdateCertificate
UpdateThing

For more information, see Logging AWS IoT API Calls with AWS CloudTrail in the AWS IoT Developer Guide.

Amazon Kinesis Firehose APIs

CreateDeliveryStream
DeleteDeliveryStream
UpdateDestination

For more information, see Logging Amazon Kinesis Firehose API Calls with AWS CloudTrail in the Amazon Kinesis Firehose Developer Guide.

Amazon Kinesis Streams APIs

AddTagsToStream
CreateStream
DecreaseStreamRetentionPeriod
DeleteStream
DisableEnhancedMonitoring
EnableEnhancedMonitoring
IncreaseStreamRetentionPeriod
MergeShards
RemoveTagsFromStream
SplitShard
UpdateShardCount

For more information, see Logging Amazon Kinesis Streams API Calls Using AWS CloudTrail in the Amazon Kinesis Developer Guide.

AWS Managed Services APIs

ApproveRfc
AssociateTechnicianWithRfc
CancelRfc
CreateRfc
DisassociateTechnicianFromRfc
PostCorrespondenceToRfc
RejectRfc
SubmitRfc
UpdateRestrictedExecutionTimes
UpdateRfcDescription
UpdateRfcExecutionParameters
UpdateRfcExpectedOutcome
UpdateRfcImplementationPlan
UpdateRfcRollbackPlan
UpdateRfcSchedule
UpdateRfcTitle
UpdateRfcWorstCaseScenario

For more information, see AWS Managed Services.

AWS Marketplace Metering Service APIs

BatchMeterUsage

For more information, see the AWS Marketplace Metering Service API Reference.

AWS OpsWorks APIs

AssignInstance
AssignVolume
AssociateElasticIp
AttachElasticLoadBalancer
CloneStack
CreateApp
CreateDeployment
CreateInstance
CreateLayer
CreateStack
CreateUserProfile
DeleteApp
DeleteInstance
DeleteLayer
DeleteStack
DeleteUserProfile
DeregisterElasticIp
DeregisterEcsCluster
DeregisterInstance
DeregisterRdsDbInstance
DeregisterVolume
DetachElasticLoadBalancer
DisassociateElasticIp
GrantAccess
RebootInstance
RegisterEcsCluster
RegisterElasticIp
RegisterInstance
RegisterRdsDbInstance
RegisterVolume
SetLoadBasedAutoScaling
SetPermission
SetTimeBasedAutoScaling
StartInstance
StartStack
StopInstance
StopStack
UnassignInstance
UnassignVolume
UpdateApp
UpdateElasticIp
UpdateInstance
UpdateLayer
UpdateMyUserProfile
UpdateRdsDbInstance
UpdateStack
UpdateUserProfile
UpdateVolume

For more information, see Logging AWS OpsWorks API Calls By Using AWS CloudTrail in the AWS OpsWorks User Guide.

Amazon QuickSight Events

BatchCreateUser
BatchResendUserInvite
CreateAccount
CreateAnalysis
CreateDashboard
CreateDataSet
CreateDataSource
CreatePermission
CreateSpiceCapacity
CreateSubscription
DeleteAccount
DeleteAnalysis
DeleteDashboard
DeleteDataSet
DeleteDataSource
DeleteSpiceCapacity
DeleteSubscription
DeleteUser
ImportS3ManifestFile
UpdateAccountSettings
UpdateAnalysis
UpdateAnalysisAccess
UpdateDashboard
UpdateDashboardAccess
UpdateDataSet
UpdateDataSource
UpdateGroups
UpdateSubscription

For more information, see Logging Operations with CloudTrail in the Amazon QuickSight User Guide.

Amazon Redshift APIs

AuthorizeClusterSecurityGroupIngress
AuthorizeSnapshotAccess
CopyClusterSnapshot
CreateCluster
CreateClusterParameterGroup
CreateClusterSecurityGroup
CreateClusterSnapshot
CreateClusterSubnetGroup
CreateEventSubscription
CreateHsmClientCertificate
CreateHsmConfiguration
CreateTags
DeleteCluster
DeleteClusterParameterGroup
DeleteClusterSecurityGroup
DeleteClusterSnapshot
DeleteClusterSubnetGroup
DeleteEventSubscription
DeleteHsmClientCertificate
DeleteHsmConfiguration
DeleteTags
DisableLogging
DisableSnapshotCopy
EnableLogging
EnableSnapshotCopy
ModifyCluster
ModifyClusterIamRoles
ModifyClusterParameterGroup
ModifyClusterSubnetGroup
ModifyEventSubscription
ModifySnapshotCopyRetentionPeriod
PurchaseReservedNodeOffering
RebootCluster
ResetClusterParameterGroup
RestoreFromClusterSnapshot
RestoreTableFromClusterSnapshot
RevokeClusterSecurityGroupIngress
RevokeSnapshotAccess
RotateEncryptionKey

For more information, see Using AWS CloudTrail for Amazon Redshift in the Amazon Redshift Cluster Management Guide.

Amazon Relational Database Service APIs

AddSourceIdentifierToSubscription
AddTagsToResource
ApplyPendingMaintenanceAction
AuthorizeDBSecurityGroupIngress
CopyDBParameterGroup
CopyDBSnapshot
CopyOptionGroup
CreateDBCluster
CreateDBClusterParameterGroup
CreateDBClusterSnapshot
CreateDBInstance
CreateDBInstanceReadReplica
CreateDBParameterGroup
CreateDBSecurityGroup
CreateDBSnapshot
CreateDBSubnetGroup
CreateEventSubscription
CreateOptionGroup
DeleteDBCluster
DeleteDBClusterParameterGroup
DeleteDBClusterSnapshot
DeleteDBInstance
DeleteDBParameterGroup
DeleteDBSecurityGroup
DeleteDBSnapshot
DeleteDBSubnetGroup
DeleteEventSubscription
DeleteOptionGroup
FailoverDBCluster
ModifyDBCluster
ModifyDBClusterParameterGroup
ModifyDBInstance
ModifyDBParameterGroup
ModifyDBSnapshotAttribute
ModifyDBSubnetGroup
ModifyEventSubscription
ModifyOptionGroup
PromoteReadReplica
PurchaseReservedDBInstancesOffering
RebootDBInstance
RemoveSourceIdentifierFromSubscription
RemoveTagsFromResource
ResetDBClusterParameterGroup
ResetDBParameterGroup
RestoreDBClusterFromSnapshot
RestoreDBClusterToPointInTime
RestoreDBInstanceFromDBSnapshot
RestoreDBInstanceToPointInTime
RevokeDBSecurityGroupIngress

For more information, see Logging Amazon RDS API Calls Using AWS CloudTrail in the Amazon Relational Database Service User Guide.

Amazon Route 53 APIs

AssociateVPCWithHostedZone
ChangeTagsForResource
ChangeResourceRecordSets
CreateHealthCheck
CreateHostedZone
CreateReusableDelegationSet
CreateTrafficPolicy
CreateTrafficPolicyInstance
CreateTrafficPolicyVersion
DeleteHealthCheck
DeleteHostedZone
DeleteReusableDelegationSet
DeleteTrafficPolicy
DeleteTrafficPolicyInstance
DisassociateVPCFromHostedZone
UpdateHealthCheck
UpdateHostedZoneComment
UpdateTrafficPolicyComment
UpdateTrafficPolicyInstance

For more information, see Using AWS CloudTrail to Capture Requests Sent to the Amazon Route 53 API in the Amazon Route 53 Developer Guide.

AWS Server Migration Service APIs

CreateReplicationJob
DeleteReplicationJob
DeleteServerCatalog
DisassociateConnector
ImportServerCatalog
SendMessage
StartReplicationRun
UpdateReplicationJob

For more information, see the AWS SMS API Reference.

AWS Service Catalog APIs

AcceptPortfolioShare
AssociatePrincipalWithPortfolio
AssociateProductWithPortfolio
CreateConstraint
CreatePortfolio
CreatePortfolioShare
CreateProduct
CreateProvisioningArtifact
DeleteConstraint
DeletePortfolio
DeletePortfolioShare
DeleteProduct
DeleteProvisioningArtifact
DisassociatePrincipalFromPortfolio
DisassociateProductFromPortfolio
ProvisionProduct
RejectPortfolioShare
TerminateProvisionedProduct
UpdateConstraint
UpdatePortfolio
UpdateProduct
UpdateProvisioningArtifact
UpdateProvisionedProduct

For information, see Logging AWS Service Catalog API Calls with AWS CloudTrail in the AWS Service Catalog Developer Guide.

Amazon Simple Storage Service (S3) Bucket Level APIs

CreateBucket
DeleteBucket
DeleteBucketCors
DeleteBucketLifecycle
DeleteBucketPolicy
DeleteBucketReplication
DeleteBucketTagging
DeleteBucketWebsite
PutBucketAcl
PutBucketCors
PutBucketLifecycle
PutBucketLogging
PutBucketNotification
PutBucketPolicy
PutBucketReplication
PutBucketRequestPayment
PutBucketTagging
PutBucketVersioning
PutBucketWebsite

Event history doesn't support Amazon S3 object-level API operations such as DeleteObject, PostObject, and PutObject. You can view events for these operations in the log files delivered to your S3 bucket. For more information, see Logging Amazon S3 API Calls By Using AWS CloudTrail in the Amazon Simple Storage Service Developer Guide.

Amazon Simple Workflow Service APIs

DeprecateActivityType
DeprecateDomain
DeprecateWorkflowType
RegisterActivityType
RegisterDomain
RegisterWorkflowType

For more information, see Logging Amazon Simple Workflow Service API Calls with AWS CloudTrail in the Amazon Simple Workflow Service Developer Guide.

AWS Step Functions APIs

CreateActivity
CreateStateMachine
DeleteActivity
DeleteStateMachine
StartExecution
StopExecution

For more information, see Logging AWS Step Functions API Calls with AWS CloudTrail in the AWS Step Functions Developer Guide.

AWS Storage Gateway APIs

ActivateGateway
AddCache
AddUploadBuffer
AddWorkingStorage
CancelArchival
CancelRetrieval
CreateCachediSCSIVolume
CreateNfsFileShare
CreateSnapshot
CreateSnapshotFromVolumeRecoveryPoint
CreateStorediSCSIVolume
CreateTapes
DeleteBandwidthRateLimit
DeleteChapCredentials
DeleteFileShare
DeleteGateway
DeleteSnapshotSchedule
DeleteTape
DeleteTapeArchive
DeleteVolume
DisableGateway
RefreshCache
ShutdownGateway
StartGateway
UpdateBandwidthRateLimit
UpdateChapCredentials
UpdateGatewayInformation
UpdateGatewaySoftwareNow
UpdateMaintenanceStartTime
UpdateNfsFileShare
UpdateSnapshotSchedule
UpdateVTLDeviceType

For more information, see Logging AWS Storage Gateway API Calls by Using AWS CloudTrail in the AWS Storage Gateway User Guide.

AWS Support APIs

AddAttachmentsToSet
AddCommunicationToCase
CreateCase
ResolveCase

For more information, see Logging AWS Support API Calls with AWS CloudTrail in the AWS Support User Guide.

AWS WAF APIs

CreateByteMatchSet
CreateIPSet
CreateRule
CreateSizeConstraintSet
CreateSqlInjectionMatchSet
CreateWebACL
CreateXssMatchSet
DeleteByteMatchSet
DeleteIPSet
DeleteRule
DeleteSizeConstraintSet
DeleteSqlInjectionMatchSet
DeleteWebACL
DeleteXssMatchSet
UpdateByteMatchSet
UpdateIPSet
UpdateRule
UpdateSizeConstraintSet
UpdateSqlInjectionMatchSet
UpdateWebACL
UpdateXssMatchSet

For more information, see Logging AWS WAF API Calls with AWS CloudTrail in the AWS WAF Developer Guide.

Amazon WorkDocs APIs

ActivateUser
AddResourcePermissions
AddUserToGroup
CreateInstance
CreateNotificationTopic
DeactivateUser
DeleteAllResourcePermissions
DeleteInstance
DeleteNotificationTopic
DeleteResourcePermission
DeregisterDirectory
DisableDirectoryMFA
EnableDirectoryMFA
RegisterDirectory
RemoveUserFromGroup
ResendUserNotification
SetPublishRoleArn
UpdateDirectoryMFA
UpdateInstanceAlias

For more information, see Logging Amazon WorkDocs API Calls By Using AWS CloudTrail in the Amazon WorkDocs Administration Guide.

AWS Console Sign-in Events

You can also look up non-API events in your account, such as signing in the AWS console or switching a role.

ConsoleLogin
ExitRole
RenewRole
SwitchRole

For more information, see AWS Console Sign-in Events.