AWS Systems Manager
User Guide

Auditing and Logging Distributor Activity

For more information about auditing and logging options for AWS Systems Manager, see Monitoring Instances with AWS Systems Manager.

Audit Distributor Activity Using AWS CloudTrail

AWS CloudTrail captures API calls made in the Systems Manager console, the AWS CLI, and the Systems Manager SDK. The information can be viewed in the CloudTrail console or stored in an Amazon S3 bucket. One bucket is used for all CloudTrail logs for your account.

Logs of Run Command and State Manager actions show document creation, package installation, and package uninstallation activity. For more information about viewing and using CloudTrail logs of Systems Manager activity, see Log AWS Systems Manager API Calls with AWS CloudTrail.