Document history - AWS CloudTrail
Earlier updates

Document history

The following table describes the important changes to the documentation for AWS CloudTrail. For notification about updates to this documentation, you can subscribe to an RSS feed.

  • API version: 2013-11-01

  • Latest documentation update: 2022-09-30

ChangeDescriptionDate

Added functionality

You can now copy CloudTrail trail events to a CloudTrail Lake event data store. For more information, see Copying trail events to CloudTrail Lake.

September 19, 2022

Updated documentation

Added list of supported Amazon CloudWatch metrics for CloudTrail Lake. For more information, see Supported CloudWatch metrics.

September 16, 2022

Added functionality

You can now view CloudTrail service-linked channels using the AWS CLI. For more information, see Viewing service-linked channels for CloudTrail by using the AWS CLI.

September 9, 2022

New region support

CloudTrail expanded support to a new region, the Middle East (UAE) region. For more information, see CloudTrail supported regions.

August 30, 2022

Updated documentation

Added list of services that report TLS details to CloudTrail. For more information, see Services that support TLS details in CloudTrail.

July 19, 2022

Changed functionality

CloudTrail has changed the name of the managed policy AWSCloudTrailReadOnlyAccess to AWSCloudTrail_ReadOnlyAccess. Permissions in this policy have been scoped down. By default, the policy no longer grants permission to list all Amazon S3 buckets, AWS Lambda functions, or AWS KMS aliases. For more information, see Read-only access.

June 6, 2022

Changed functionality

As a security best practice, you can now add an aws:SourceArn or aws:SourceAccount condition key to an s3:GetBucketAcl ACL checking block in Amazon S3 bucket policies. For more information, see Configure Amazon S3 bucket policies for CloudTrail.

May 11, 2022

Changed functionality

Starting Feb 24, 2022, AWS CloudTrail began changing the userAgent and sourceIPAddress field values in any event that originated from an AWS Management Console session where a proxy client was used. For these events, CloudTrail replaces the values of the userAgent and sourceIPAddress fields with AWS Internal. CloudTrail made this change to standardize how it logs information for service actions across all AWS services. For more information, see CloudTrail record contents.

April 12, 2022

Added service support

This release supports Amazon GameSparks. See AWS CloudTrail Supported Services and Integrations.

March 24, 2022

Added service support

This release supports AWS App Mesh Envoy Management Service. See AWS CloudTrail Supported Services and Integrations.

March 18, 2022

Updated documentation

New query examples have been added for CloudTrail Lake, a new feature that lets you run fine-grained, multiple-field SQL queries on your events. Also, a new field, BytesScanned, has been added to the query metadata results of DescribeQuery and GetQueryResults operations. For more information, see Working with CloudTrail Lake.

March 4, 2022

Changed functionality

CloudTrail now removes the account ID of the Amazon S3 bucket owner in the resources block of a data event if both of the following conditions are met: the data event API call is from a different AWS account than the Amazon S3 bucket owner, and the API caller received an AccessDenied error that was only for the caller account. For more information, see Redacting bucket owner account IDs for data events called by other accounts.

March 3, 2022

Updated documentation

This update supports the following release for the CloudTrail Processing Library: Added support for implementing a custom S3 manager, event logging to log file parsing-related exceptions, support for parsing an optional errorCode field in insightDetails, and updated the account ID parsing regex to accept non-numerical values. For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

January 28, 2022

Added functionality

CloudTrail introduces CloudTrail Lake, a new feature that lets you run fine-grained, multiple-field SQL queries on your events. Events are aggregated into event data stores, which are immutable collections of events based on criteria that you select by applying advanced event selectors. For more information, see Working with CloudTrail Lake.

January 5, 2022

New region support

CloudTrail expanded support to a new region, the Asia Pacific (Jakarta) region. For more information, see CloudTrail supported regions.

December 13, 2021

Added service support

This release supports Amazon WorkSpaces Web. See AWS CloudTrail Supported Services and Integrations.

December 3, 2021

Added functionality

You can now log CloudTrail data events on AWS Glue tables by using advanced event selectors. For more information, see Logging data events for trails.

November 30, 2021

Changed functionality

As a security best practice, you can now add an aws:SourceArn or aws:SourceAccount condition key to AWS KMS key policies and Amazon S3 bucket policies. For more information, see Configure AWS KMS key policies for CloudTrail and Configure Amazon S3 bucket policies for CloudTrail.

November 15, 2021

Added service support

This release supports AWS Resilience Hub. See AWS CloudTrail Supported Services and Integrations.

November 10, 2021

Added functionality

A new CloudTrail Insights event type is available: error rate Insights events. An error rate Insights event captures unusual activity on an error that occurs on APIs called in your account. For more information, see Logging Insights events for trails.

November 10, 2021

Added functionality

You can now log CloudTrail data events on DynamoDB streams by using advanced event selectors. For more information, see Logging data events for trails.

September 22, 2021

Added functionality

You can now log data events on Amazon S3 access points. You can log Amazon S3 access point data events by using advanced event selectors. For more information, see Logging data events for trails.

August 24, 2021

Changed functionality

When you configure a trail to send notifications to Amazon SNS, CloudTrail adds a policy statement to your SNS topic access policy that allows CloudTrail to send content to an SNS topic. As a security best practice, we recommend adding an aws:SourceArn or aws:SourceAccount condition key to the CloudTrail policy statement. For more information, see Amazon SNS topic policy for CloudTrail.

August 16, 2021

Added service support

This release supports Amazon Route 53 Application Recovery Controller. See AWS CloudTrail Supported Services and Integrations.

July 27, 2021

Added functionality

You can now log data events on Amazon EBS direct APIs run on EBS snapshots. You can log Amazon EBS direct API data events by using advanced event selectors. For more information, see Logging data events for trails.

July 27, 2021

Changed functionality

When CloudTrail processes data events, it preserves numbers in their original format, whether that is an integer (int) or a float. In events that have integers in the fields of a data event, CloudTrail historically processed these numbers as floats. Now, CloudTrail keeps the original format of integers in data events. For more information, see Using the CloudTrail Processing Library.

July 13, 2021

Added functionality

You can now exclude Amazon RDS Data API management events from your trails. For more information, see Logging management events for trails.

July 1, 2021

Added service support

This release supports AWS BugBust. See AWS CloudTrail Supported Services and Integrations.

June 24, 2021

Added service support

This release supports Amazon Managed Grafana and Amazon Managed Service for Prometheus. See AWS CloudTrail Supported Services and Integrations.

June 2, 2021

Added service support

This release supports AWS App Runner. See AWS CloudTrail Supported Services and Integrations.

May 18, 2021

Added service support

This release supports AWS Systems Manager Incident Manager. See AWS CloudTrail Supported Services and Integrations.

May 10, 2021

Updated documentation

This update describes data event logging requirements for AWS Config conformance packs, especially for compliance frameworks such as HIPAA or FedRAMP. For more information, see Logging data events for trails.

May 7, 2021

Added service support

This release supports Service Quotas and Amazon EBS direct APIs. See AWS CloudTrail Supported Services and Integrations.

April 13, 2021

Added functionality

After an IAM administrator configures AWS STS, CloudTrail logs sourceIdentity information in events when users assume an IAM role, or perform any actions with the assumed role. For more information, see CloudTrail userIdentity Element.

April 13, 2021

Updated documentation

This update documents limits, in kilobytes (KB), for content in some CloudTrail event record fields. For more information, see CloudTrail record contents.

April 8, 2021

Added functionality

After an IAM administrator configures AWS STS, CloudTrail logs sourceIdentity information in events when users assume an IAM role, or perform any actions with the assumed role. For more information, see CloudTrail userIdentity Element.

April 6, 2021

Added functionality

You can now log data events on Amazon DynamoDB tables. You can log DynamoDB data events by using either event selectors or advanced event selectors. For more information, see Logging data events for trails.

March 23, 2021

Added service support

This release supports Amazon Managed Workflows for Apache Airflow. See AWS CloudTrail Supported Services and Integrations.

March 22, 2021

Added functionality

You can now log data events on S3 Object Lambda access points if you have opted in to use advanced event selectors. For more information, see Logging data events for trails.

March 18, 2021

Added service support

This release supports AWS Fault Injection Simulator. See AWS CloudTrail Supported Services and Integrations.

March 15, 2021

Added functionality

You can now log data events on Ethereum nodes in Amazon Managed Blockchain if you have opted in to use advanced event selectors. For more information, see Logging data events for trails.

March 1, 2021

Added service support

This release supports Amazon Managed Blockchain and the preview of Ethereum for Managed Blockchain. See AWS CloudTrail Supported Services and Integrations.

February 4, 2021

Added service support

This release supports AWS Amplify. See AWS CloudTrail Supported Services and Integrations.

February 3, 2021

Added service support

This release supports Amazon Lookout for Metrics. See AWS CloudTrail Supported Services and Integrations.

February 1, 2021

Updated documentation

This update supports the following patch release for the CloudTrail Processing Library: Update the .jar file references in the user guide to use the latest version, aws-cloudtrail-processing-library-1.4.0.jar. For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

January 12, 2021

Added functionality

You can now log data events on Amazon S3 on AWS Outposts. For more information, see Logging data events for trails.

December 21, 2020

Added service support

This release supports Amazon Lookout for Equipment, AWS Well-Architected Tool, and Amazon Location Service. See AWS CloudTrail Supported Services and Integrations.

December 16, 2020

Added service support

This release supports AWS IoT Greengrass V2. See AWS CloudTrail Supported Services and Integrations.

December 15, 2020

Added service support

This release supports Amazon EMR on EKS. See AWS CloudTrail Supported Services and Integrations.

December 10, 2020

Added service support

This release supports AWS Audit Manager and Amazon HealthLake. See AWS CloudTrail Supported Services and Integrations.

December 8, 2020

Added service support

This release supports Amazon Lookout for Vision. See AWS CloudTrail Supported Services and Integrations.

December 1, 2020

Added functionality

The AWS CloudTrail event version is now 1.08. Version 1.08 introduces new fields for CloudTrail. For more information, see CloudTrail record contents.

November 24, 2020

Added functionality

AWS CloudTrail introduces advanced event selectors for data events. Advanced event selectors allow finer-grained control over the data events that you log to your trail. You can include or exclude data events for specific AWS resources, and select specific APIs on those resources to log to your trail. For more information, see Logging data events for trails.

November 24, 2020

Added service support

This release supports AWS Network Firewall. See AWS CloudTrail Supported Services and Integrations.

November 17, 2020

Added service support

This release supports AWS Trusted Advisor. See AWS CloudTrail Supported Services and Integrations.

October 22, 2020

Updated documentation

Added two new examples of event records for root user sign-in events. For more information, see AWS Console sign-in events.

October 13, 2020

Changed functionality

Permissions in the AWSCloudTrail_FullAccess policy have been narrowed. This policy no longer allows you to delete Amazon SNS topics or Amazon S3 buckets, and the getObject action has been removed. For more information, see Granting custom permissions for CloudTrail users.

September 29, 2020

Updated documentation

This update supports the following patch release for the CloudTrail Processing Library: Update the .jar file references in the user guide to use the latest version, aws-cloudtrail-processing-library-1.3.0.jar. For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

August 28, 2020

Added service support

This release supports AWS Outposts. See AWS CloudTrail Supported Services and Integrations.

August 28, 2020

Added functionality

AWS CloudTrail Insights introduces attribution fields for CloudTrail Insights events. Attribution fields show the top user identities, user agents, and error codes that are associated with the anomalous activity that triggers Insights events. For comparison, attribution fields also show the top user identities, user agents, and error codes associated with normal, or baseline, activity. For more information, see Logging Insights events for trails.

August 13, 2020

Added functionality

The AWS CloudTrail console has a new look that's designed to make it easier to use. The AWS CloudTrail User Guide has been updated with changes to procedures for how to perform tasks in the console, such as creating trails, updating trails, and downloading event history.

August 13, 2020

Added service support

This release supports Amazon Interactive Video Service. See AWS CloudTrail Supported Services and Integrations.

July 15, 2020

Added service support

This release supports Amazon Honeycode. See AWS CloudTrail Supported Services and Integrations.

June 24, 2020

Added service support

This release supports Amazon Macie. See AWS CloudTrail Supported Services and Integrations.

May 19, 2020

Added service support

This release supports Amazon Kendra. See AWS CloudTrail Supported Services and Integrations.

May 13, 2020

Added service support

This release supports AWS IoT SiteWise. See AWS CloudTrail Supported Services and Integrations.

April 29, 2020

Added region support

This release supports an additional region: Europe (Milan). See AWS CloudTrail Supported Regions.

April 28, 2020

Added service and region support

This release supports Amazon AppFlow. See AWS CloudTrail Supported Services and Integrations. Support has also been added for the Africa (Cape Town) Region. See AWS CloudTrail Supported Regions.

April 22, 2020

Added functionality

High-volume AWS KMS actions such as Encrypt, Decrypt, and GenerateDataKey are now logged as Read events. If you choose to log all AWS KMS events on your trail, and also choose to log Write management events, your trail logs relevant AWS KMS actions like Disable, Delete and ScheduleKey.

April 7, 2020

Added service support

This release supports Amazon CodeGuru Reviewer. See AWS CloudTrail Supported Services and Integrations.

February 7, 2020

Added service support

This release supports Amazon Managed Apache Cassandra Service. See AWS CloudTrail Supported Services and Integrations.

January 17, 2020

Added service support

This release supports Amazon Connect. See AWS CloudTrail Supported Services and Integrations.

December 13, 2019

Updated documentation

This update supports the following patch release for the CloudTrail Processing Library: Update the .jar file references in the user guide to use the latest version, aws-cloudtrail-processing-library-1.2.0.jar. For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

November 21, 2019

Added functionality

This release supports AWS CloudTrail Insights for helping you detect unusual activity in your account. See Logging Insights events for Trails.

November 20, 2019

Added functionality

This release adds an option for filtering AWS Key Management Service events out of a trail. See Creating a Trail.

November 20, 2019

Added service support

This release supports AWS CodeStar Notifications. See AWS CloudTrail Supported Services and Integrations.

November 7, 2019

Added functionality

This release supports adding tags when you create a trail in CloudTrail, whether you use the CloudTrail console or API. This release adds two new APIs, GetTrail and ListTrails.

November 1, 2019

Added service support

This release supports AWS App Mesh. See AWS CloudTrail Supported Services and Integrations.

October 17, 2019

Added service support

This release supports Amazon Translate. See AWS CloudTrail Supported Services and Integrations.

October 17, 2019

Documentation update

The Unsupported Services topic has been restored and updated to include only those AWS services that do not currently log events in CloudTrail. See CloudTrail Unsupported Services.

October 7, 2019

Documentation update

The documentation has been updated with changes to the AWSCloudTrailFullAccess policy. A policy example that shows equivalent permissions to AWSCloudTrailFullAccess has been updated to restrict the resources on which the iam:PassRole action can act to those matching the following condition statement: "iam:PassedToService": "cloudtrail.amazonaws.com". See AWS CloudTrail Identity-Based Policy Examples.

September 24, 2019

Documentation update

The documentation has been updated with a new topic, Managing CloudTrail Costs, to help you get the log data you need out of CloudTrail while staying within a budget.

September 3, 2019

Added service support

This release supports AWS Control Tower. See AWS CloudTrail Supported Services and Integrations.

August 13, 2019

Added region support

This release supports an additional region: Middle East (Bahrain). See AWS CloudTrail Supported Regions.

July 29, 2019

Documentation update

The documentation has been updated with information about security for CloudTrail. See Security in AWS CloudTrail.

July 3, 2019

Added service support

This release supports AWS Ground Station. See AWS CloudTrail Supported Services and Integrations.

June 6, 2019

Added service support

This release supports AWS IoT Things Graph. See AWS CloudTrail Supported Services and Integrations.

June 4, 2019

Added service support

This release supports Amazon AppStream 2.0. See AWS CloudTrail Supported Services and Integrations.

April 25, 2019

Added region support

This release supports an additional region: Asia Pacific (Hong Kong). See AWS CloudTrail Supported Regions.

April 24, 2019

Added service support

This release supports Amazon Kinesis Data Analytics. See AWS CloudTrail Supported Services and Integrations.

March 22, 2019

Added service support

This release supports AWS Backup. See AWS CloudTrail Supported Services and Integrations.

February 4, 2019

Added service support

This release supports Amazon WorkLink. See AWS CloudTrail Supported Services and Integrations.

January 23, 2019

Added service support

This release supports AWS Cloud9. See AWS CloudTrail Supported Services and Integrations.

January 21, 2019

Added service support

This release supports AWS Elemental MediaLive. See AWS CloudTrail Supported Services and Integrations.

January 19, 2019

Added service support

This release supports Amazon Comprehend. See AWS CloudTrail Supported Services and Integrations.

January 18, 2019

Added service support

This release supports AWS Elemental MediaPackage. See AWS CloudTrail Supported Services and Integrations.

December 21, 2018

Added region support

This release supports an additional region: EU (Stockholm). See AWS CloudTrail Supported Regions.

December 11, 2018

Documentation update

The documentation has been updated with information about supported and unsupported services. See AWS CloudTrail Supported Services and Integrations.

December 3, 2018

Added service support

This release supports AWS Resource Access Manager (AWS RAM). See AWS CloudTrail Supported Services and Integrations.

November 20, 2018

Updated functionality

This release supports creating a trail in CloudTrail that logs events for all AWS accounts in an organization in AWS Organizations. See Creating a Trail for an Organization.

November 19, 2018

Added service support

This release supports Amazon Pinpoint SMS and Voice API. See AWS CloudTrail Supported Services and Integrations.

November 16, 2018

Added service support

This release supports AWS IoT Greengrass. See AWS CloudTrail Supported Services and Integrations.

October 29, 2018

Updated documentation

This update supports the following patch release for the CloudTrail Processing Library: Update the .jar file references in the user guide to use the latest version, aws-cloudtrail-processing-library-1.1.3.jar. For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

October 18, 2018

Added functionality

This release supports using additional filters in Event history. See Viewing CloudTrail Events in the CloudTrail Console.

October 18, 2018

Added functionality

This release supports using Amazon Virtual Private Cloud (Amazon VPC) to establish a private connection between your VPC and AWS CloudTrail. See Using AWS CloudTrail with Interface VPC Endpoints.

August 9, 2018

Added service support

This release supports Amazon Data Lifecycle Manager. See AWS CloudTrail Supported Services and Integrations.

July 24, 2018

Added service support

This release supports Amazon MQ. See AWS CloudTrail Supported Services and Integrations.

July 19, 2018

Added service support

This release supports AWS Mobile CLI. See AWS CloudTrail Supported Services and Integrations.

June 29, 2018

AWS CloudTrail documentation history notification available through RSS feed

You can now receive notification about updates to the AWS CloudTrail documentation by subscribing to an RSS feed.

June 29, 2018

Earlier updates

The following table describes the documentation release history of AWS CloudTrail prior to June 29, 2018.

Change Description Release Date
Added service support This release supports Amazon RDS Performance Insights. For more information, see CloudTrail Supported Services and Integrations. June 21, 2018
Added functionality This release supports logging all CloudTrail management events in Event history. For more information, see Viewing events with CloudTrail Event history. June 14, 2018
Added service support This release supports AWS Billing and Cost Management. See CloudTrail supported services and integrations. June 7, 2018
Added service support This release supports Amazon Elastic Container Service for Kubernetes (Amazon EKS). See CloudTrail supported services and integrations. June 5, 2018
Updated documentation

This update supports the following patch release for the CloudTrail Processing Library:

  • Update the .jar file references in the user guide to use the latest version, aws-cloudtrail-processing-library-1.1.2.jar.

For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

 May 16, 2018
Added service support This release supports AWS Billing and Cost Management. See CloudTrail supported services and integrations. June 7, 2018
Added service support This release supports Amazon Elastic Container Service for Kubernetes (Amazon EKS). See CloudTrail supported services and integrations. June 5, 2018
Updated documentation

This update supports the following patch release for the CloudTrail Processing Library:

  • Update the .jar file references in the user guide to use the latest version, aws-cloudtrail-processing-library-1.1.2.jar.

For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

 May 16, 2018
Added service support This release supports AWS X-Ray. See CloudTrail supported services and integrations. April 25, 2018
Added service support This release supports AWS IoT Analytics. See CloudTrail supported services and integrations. April 23, 2018
Added service support This release supports Secrets Manager. See CloudTrail supported services and integrations. April 10, 2018
Added service support This release supports Amazon Rekognition. See CloudTrail supported services and integrations. April 6, 2018
Added service support This release supports AWS Private Certificate Authority (PCA). See CloudTrail supported services and integrations. April 4, 2018
Added functionality This release supports making it easier to search CloudTrail log files with Amazon Athena. You can automatically create tables for querying logs directly from the CloudTrail console, and use those tables to run queries in Athena. For more information, see CloudTrail supported services and integrations and Creating a Table for CloudTrail Logs in the CloudTrail Console. March 15, 2018
Added service support This release supports AWS AppSync. See CloudTrail supported services and integrations. February 13, 2018

Added region support

This release supports an additional region: Asia Pacific (Osaka) (ap-northeast-3). See CloudTrail supported regions.

February 12, 2018
Added service support This release supports AWS Shield. See CloudTrail supported services and integrations. February 12, 2018
Added service support This release supports Amazon SageMaker. See CloudTrail supported services and integrations. January 11, 2018
Added service support This release supports AWS Batch. See CloudTrail supported services and integrations. January 10, 2018
Added functionality This release supports extending the amount of account activity that is available in CloudTrail event history to 90 days. You can also customize the display of columns to improve the view of your CloudTrail events. For more information, see Viewing events with CloudTrail Event history. December 12, 2017
Added service support This release supports Amazon WorkMail. See CloudTrail supported services and integrations. December 12, 2017
Added service support This release supports Alexa for Business, AWS Elemental MediaConvert, and AWS Elemental MediaStore. See CloudTrail supported services and integrations. December 1, 2017
Added functionality and documentation

This release supports logging data events for AWS Lambda functions.

For more information, see Logging data events for trails.

 November 30, 2017
Added functionality and documentation

This release supports logging data events for AWS Lambda functions.

For more information, see Logging data events for trails.

 November 30, 2017
Added functionality and documentation

This release supports the following updates to the CloudTrail Processing Library:

  • Add support for Boolean identification of management events.

  • Update the CloudTrail event version to 1.06.

For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

 November 30, 2017
Added service support This release supports AWS Glue. See CloudTrail supported services and integrations. November 7, 2017
New documentation This release adds a new topic, Quotas in AWS CloudTrail. October 19, 2017

Updated documentation

This release updates the documentation of APIs supported in CloudTrail event history for Amazon Athena, AWS CodeBuild, Amazon Elastic Container Registry, and AWS Migration Hub.

 October 13, 2017
Added service support This release supports Amazon Chime. See CloudTrail supported services and integrations. September 27, 2017
Added functionality and documentation This release supports configuring data event logging for all Amazon S3 buckets in your AWS account. See Logging data events for trails. September 20, 2017
Added service support This release supports Amazon Lex. See CloudTrail supported services and integrations. August 15, 2017

Added service support

 This release supports AWS Migration Hub. See CloudTrail supported services and integrations. August 14, 2017

Added functionality and documentation

This release supports CloudTrail being enabled by default for all AWS accounts. The past seven days of account activity are available in CloudTrail event history, and the most recent events appear on the console dashboard. The feature formerly known as API activity history has been replaced by Event history.

For more information, see How CloudTrail works.

 August 14, 2017

Added functionality and documentation

This release supports downloading events from the CloudTrail console on the API activity history page. You can download events in JSON or CSV format.

For more information, see Downloading events.

 July 27, 2017
Added functionality

This release supports logging Amazon S3 object level API operations in two additional regions, Europe (London) and Canada (Central).

For more information, see Working with CloudTrail log files.

 July 19, 2017

Added service support

 This release supports looking up APIs for Amazon CloudWatch Events in the CloudTrail API activity history feature.

June 27, 2017

Added functionality and documentation

This release supports additional APIs in the CloudTrail API activity history feature for the following services:

  • AWS CloudHSM

  • Amazon Cognito

  • Amazon DynamoDB

  • Amazon EC2

  • Kinesis

  • AWS Storage Gateway

 June 27, 2017
Added service support This release supports AWS CodeStar. See CloudTrail supported services and integrations. June 14, 2017
Added functionality and documentation

This release supports the following updates to the CloudTrail Processing Library:

  • Add support for different formats for SQS messages from the same SQS queue to identify CloudTrail log files. The following formats are supported:

    • Notifications that CloudTrail sends to an SNS topic

    • Notifications that Amazon S3 sends to an SNS topic

    • Notifications that Amazon S3 sends directly to an SQS queue

  • Add support for the deleteMessageUponFailure property, which you can use to delete messages that can't be processed.

For more information, see Using the CloudTrail Processing Library and the CloudTrail Processing Library on GitHub.

 June 1, 2017

Added service support

This release supports Amazon Athena. See CloudTrail supported services and integrations.

 May 19, 2017
Added functionality

This release supports sending data events to Amazon CloudWatch Logs.

For more information about configuring your trail to log data events, see Data events.

For more information about sending events to CloudWatch Logs, see Monitoring CloudTrail Log Files with Amazon CloudWatch Logs.

 May 9, 2017
Added service support This release supports the AWS Marketplace Metering Service. See CloudTrail supported services and integrations. May 2, 2017

Added service support

This release supports Amazon QuickSight. See CloudTrail supported services and integrations.

 April 28, 2017
Added functionality and documentation This release supports an updated console experience for creating new trails. You can now configure a new trail to log management and data events. For more information, see Creating a trail. April 11, 2017
Added documentation

If CloudTrail is not delivering logs to your S3 bucket or sending SNS notifications from some regions in your account, you may need to update the policies.

To learn more about updating your S3 bucket policy, see Common Amazon S3 policy configuration errors.

To learn more about updating your SNS topic policy, see Common SNS policy configuration errors.

 March 31, 2017
Added service support This release supports AWS Organizations. See CloudTrail supported services and integrations. February 27, 2017
Added functionality and documentation This release supports an updated console experience for configuring trails for logging management and data events. For more information, see Working with CloudTrail log files. February 10, 2017

Added service support

This release supports Amazon Cloud Directory. See CloudTrail supported services and integrations.

 January 26, 2017

Added functionality and documentation

This release supports looking up APIs for AWS CodeCommit, Amazon GameLift, and AWS Managed Services in the CloudTrail API activity history.

 January 26, 2017

Added functionality

This release supports integration with the AWS Health Dashboard.

You can use the AWS Health Dashboard to identify if your trails are unable to deliver logs to an SNS topic or S3 bucket. This can occur when there is an issue with the policy for the S3 bucket or SNS topic. AWS Health Dashboard notifies you about the affected trails and recommends ways to fix the policy.

For more information, see the AWS Health User Guide.

 January 24, 2017

Added functionality and documentation

This release supports filtering by event source in the CloudTrail console. Event source shows the AWS service to which the request was made.

For more information, see Viewing CloudTrail events in the CloudTrail console.

 January 12, 2017
Added service support This release supports AWS CodeCommit. See CloudTrail supported services and integrations. January 11, 2017
Added service support This release supports Amazon Lightsail. See CloudTrail supported services and integrations. December 23, 2016
Added service support This release supports AWS Managed Services. See CloudTrail supported services and integrations. December 21, 2016
Added region support This release supports the Europe (London) Region. See CloudTrail supported regions. December 13, 2016
Added region support This release supports the Canada (Central) Region. See CloudTrail supported regions. December 8, 2016

Added service support

This release supports AWS CodeBuild See CloudTrail supported services and integrations.

This release supports AWS Health. See CloudTrail supported services and integrations.

This release supports AWS Step Functions. See CloudTrail supported services and integrations.

December 1, 2016
Added service support This release supports Amazon Polly. See CloudTrail supported services and integrations. November 30, 2016
Added service support This release supports AWS OpsWorks for Chef Automate. See CloudTrail supported services and integrations. November 23, 2016

Added functionality and documentation

This release supports configuring your trail to log read-only, write-only, or all events.

CloudTrail supports logging Amazon S3 object level API operations such as GetObject, PutObject, and DeleteObject. You can configure your trails to log object level API operations.

For more information, see Working with CloudTrail log files.

 November 21, 2016
Added functionality and documentation This release supports additional values for the type field in the userIdentity element: AWSAccount and AWSService. For more information, see the Fields for userIdentity. November 16, 2016
Added service support This release supports AWS Server Migration Service. See CloudTrail supported services and integrations. November 14, 2016
Added service support This release supports Application Auto Scaling. See CloudTrail supported services and integrations. October 31, 2016
Added region support This release supports the US East (Ohio) Region. See CloudTrail supported regions. October 17, 2016
Added functionality and documentation This release supports logging non-API AWS service events. For more information, see AWS service events. September 23, 2016
Added functionality and documentation This release supports using the CloudTrail console to view resource types that are supported by AWS Config. For more information, see Viewing resources referenced with AWS Config. July 7, 2016
Added service support This release supports AWS Service Catalog. See CloudTrail supported services and integrations. July 6, 2016

Added service support

This release supports Amazon Elastic File System (Amazon EFS). See CloudTrail supported services and integrations.

June 28, 2016
Added region support This release supports one additional region: ap-south-1 (Asia Pacific (Mumbai)). See CloudTrail supported regions. June 27, 2016
Added service support This release supports AWS Application Discovery Service. See CloudTrail supported services and integrations. May 12, 2016

Added service support

This release supports CloudWatch Logs in the South America (São Paulo) Region. For more information, see Monitoring CloudTrail Log Files with Amazon CloudWatch Logs.

May 6, 2016
Added service support This release supports AWS WAF. See CloudTrail supported services and integrations. April 28, 2016
Added service support This release supports AWS Support. See CloudTrail supported services and integrations. April 21, 2016
Added service support This release supports Amazon Inspector. See CloudTrail supported services and integrations. April 20, 2016
Added service support This release supports AWS IoT. See CloudTrail supported services and integrations. April 11, 2016
Added functionality and documentation This release supports logging AWS Security Token Service (AWS STS) API calls made with Security Assertion Markup Language (SAML) and web identity federation. For more information, see Values for AWS STS APIs with SAML and web identity federation. March 28, 2016
Added service support This release supports AWS Certificate Manager. See CloudTrail supported services and integrations. March 25, 2016
Added service support This release supports Amazon Kinesis Data Firehose. See CloudTrail supported services and integrations. March 17, 2016

Added service support

This release supports Amazon CloudWatch Logs. See CloudTrail supported services and integrations.

March 10, 2016
Added service support This release supports Amazon Cognito. See CloudTrail supported services and integrations. February 18, 2016
Added service support This release supports AWS Database Migration Service. See CloudTrail supported services and integrations. February 4, 2016

Added service support

This release supports Amazon GameLift (GameLift). See CloudTrail supported services and integrations.

January 27, 2016

Added service support

This release supports Amazon CloudWatch Events. See CloudTrail supported services and integrations.

January 16, 2016
Added region support This release supports one additional region: ap-northeast-2 (Asia Pacific (Seoul)). See CloudTrail supported regions. January 6, 2016

Added service support

This release supports Amazon Elastic Container Registry (Amazon ECR). See CloudTrail supported services and integrations.

December 21, 2015
Added functionality and documentation This release supports turning on CloudTrail across all regions and support for multiple trails per region. For more information, see How does CloudTrail behave regionally and globally?. December 17, 2015
Added service support This release supports Amazon Machine Learning. See CloudTrail supported services and integrations. December 10, 2015
Added functionality and documentation This release supports log file encryption, log file integrity validation, and tagging. For more information, see Encrypting CloudTrail log files with AWS KMS keys (SSE-KMS), Validating CloudTrail log file integrity, and Updating a trail. October 1, 2015
Added service support This release supports Amazon OpenSearch Service. See CloudTrail supported services and integrations. October 1, 2015
Added service support This release supports Amazon S3 bucket level events. See CloudTrail supported services and integrations. September 1, 2015

Added service support

This release supports AWS Device Farm. See CloudTrail supported services and integrations.

July 13, 2015

Added service support

This release supports Amazon API Gateway. See CloudTrail supported services and integrations.

July 9, 2015

Added service support

This release supports CodePipeline. See CloudTrail supported services and integrations.

July 9, 2015

Added service support

This release supports Amazon DynamoDB. See CloudTrail supported services and integrations.

May 28, 2015

Added service support

This release supports CloudWatch Logs in the US West (N. California) region. See the CloudTrail release notes. For more information about CloudTrail support for CloudWatch Logs monitoring, see Monitoring CloudTrail Log Files with Amazon CloudWatch Logs.

May 19, 2015

Added service support

This release supports AWS Directory Service. See CloudTrail supported services and integrations.

May 14, 2015

Added service support

This release supports Amazon Simple Email Service (Amazon SES). See CloudTrail supported services and integrations.

May 7, 2015

Added service support

This release supports Amazon Elastic Container Service See CloudTrail supported services and integrations.

April 9, 2015

Added service support

This release supports AWS Lambda. See CloudTrail supported services and integrations.

April 9, 2015

Added service support

This release supports Amazon WorkSpaces. See CloudTrail supported services and integrations.

April 9, 2015

This release supports the lookup of AWS activity captured by CloudTrail (CloudTrail events). You can look up and filter events in your account related to creation, modification, or deletion. To look up these events, you can use the CloudTrail console, the AWS Command Line Interface (AWS CLI), or the AWS SDK. For more information, see Viewing events with CloudTrail Event history.

March 12, 2015

Added service support and new documentation

This release supports Amazon CloudWatch Logs in the Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), and Europe (Frankfurt) regions. Additional CloudWatch alarm examples have been added to Creating CloudWatch Alarms for CloudTrail Events, and a new page has been added: Using an AWS CloudFormation Template to Create CloudWatch Alarms.

March 5, 2015

Added API support

This release supports Amazon EC2 Systems Manager (SSM). SSM lets you configure, manage and easily deploy custom Windows instance configurations. For more information about SSM, see Managing Windows Instance Configuration. For information about the SSM API calls logged by CloudTrail, see Logging SSM API Calls Using AWS CloudTrail.

February 17, 2015

New documentation

A new section that describes CloudTrail support for AWS Security Token Service (AWS STS) regional endpoints has been added to the CloudTrail Concepts page.

February 17, 2015

Added service support

This release supports Amazon Route 53. See CloudTrail supported services and integrations.

February 11, 2015

Added service support

This release supports AWS Config. See CloudTrail supported services and integrations.

February 10, 2015

Added service support

This release supports AWS CloudHSM. See CloudTrail supported services and integrations.

January 8, 2015

Added service support

This release supports AWS CodeDeploy. See CloudTrail supported services and integrations.

December 17, 2014

Added service support

This release supports AWS Storage Gateway. See CloudTrail supported services and integrations.

December 16, 2014

Added region support

This release supports one additional region: us-gov-west-1 (AWS GovCloud (US-West)). See CloudTrail supported regions.

December 16, 2014

Added service support

This release supports Amazon S3 Glacier. See CloudTrail supported services and integrations.

December 11, 2014

Added service support

This release supports AWS Data Pipeline. See CloudTrail supported services and integrations.

December 2, 2014

Added service support

This release supports AWS Key Management Service. See CloudTrail supported services and integrations.

November 12, 2014

New documentation

A new section, Monitoring CloudTrail Log Files with Amazon CloudWatch Logs, has been added to the guide. It describes how to use Amazon CloudWatch Logs to monitor CloudTrail log events.

November 10, 2014

New documentation

A new section, Using the CloudTrail Processing Library, has been added to the guide. It provides information about how to write a CloudTrail log processor in Java using the AWS CloudTrail Processing Library.

November 5, 2014

Added service support

This release supports Amazon Elastic Transcoder. See CloudTrail supported services and integrations.

October 27, 2014

Added region support

This release supports one additional region: eu-central-1 (Europe (Frankfurt)). See CloudTrail supported regions.

October 23, 2014

Added service support

This release supports Amazon CloudSearch. See CloudTrail supported services and integrations.

October 16, 2014

Added service support

This release supports Amazon Simple Notification Service. See CloudTrail supported services and integrations.

October 09, 2014

Added service support

This release supports Amazon ElastiCache. See CloudTrail supported services and integrations.

September 15, 2014

Added service support

This release supports Amazon WorkDocs. See CloudTrail supported services and integrations.

August 27, 2014

Added new content

This release includes a topic that discusses logging sign-in events. See AWS Management Console sign-in events.

July 24, 2014

Added new content

The eventVersion element for this release has been upgraded to version 1.02 and three new fields have been added. See CloudTrail record contents.

July 18, 2014

Added service support

This release supports Auto Scaling (see CloudTrail supported services and integrations).

July 17, 2014

Added region support

This release supports three additional regions: ap-southeast-1 (Asia Pacific (Singapore)), ap-northeast-1 (Asia Pacific (Tokyo)), sa-east-1 (South America (São Paulo)). See CloudTrail supported regions.

June 30, 2014

Additional service support

This release supports Amazon Redshift. See CloudTrail supported services and integrations.

June 10, 2014

Added service support

This release supports AWS OpsWorks. See CloudTrail supported services and integrations.

June 5, 2014

Added service support

This release supports Amazon CloudFront. See CloudTrail supported services and integrations.

May 28, 2014

Added region support

This release supports three additional regions: us-west-1 (US West (N. California)), eu-west-1 (Europe (Ireland)), ap-southeast-2 (Asia Pacific (Sydney)). See CloudTrail supported regions.

May 13, 2014

Added service support

This release supports Amazon Simple Workflow Service. See CloudTrail supported services and integrations.

May 9, 2014

Added new content

This release includes topics that discuss sharing log files between accounts. See Sharing CloudTrail log files between AWS accounts.

May 2, 2014

Added service support

This release supports Amazon CloudWatch. See CloudTrail supported services and integrations.

April 28, 2014

Added service support

This release supports Amazon Kinesis. See CloudTrail supported services and integrations.

April 22, 2014

Added service support

This release supports AWS Direct Connect. See CloudTrail supported services and integrations.

April 11, 2014

Added service support

This release supports Amazon EMR. See CloudTrail supported services and integrations.

April 4, 2014

Added service support

This release supports Elastic Beanstalk. See CloudTrail supported services and integrations.

April 2, 2014

Additional service support

This release supports AWS CloudFormation. See CloudTrail supported services and integrations.

March 7, 2014

New guide

This release introduces AWS CloudTrail.

November 13, 2013