Does CloudTrail track change to resources?

CloudTrail is a service provided by Amazon Web Services (AWS) that records and stores API call activities and events within the AWS account. It captures information such as the identity of the caller, the time of the API call, the actions performed, and the response received. This data is stored in a log file, which can be viewed and analyzed for security, compliance, and troubleshooting purposes.

CloudTrail is helpful for security as it logs all API requests and actions performed in the cloud environment which enables responding to security threats faster.

CloudTrail transfers a log file into the Amazon S3 bucket and KMS responds to this request by generating a special data key which is sent to Amazon S3 in two copies, one as plaintext and the other as encrypted along with the specific KMS key.

CloudTrail logs API calls. It captures all API requests made by or on behalf of the Amazon cloud account.

Logs for the last 90 days, can be viewed in the console of the CloudTrail. They can also be downloaded based on a filter or a time range. They may contain all the information or a subset depending on the client’s needs.