What are the functions of AWS KMS and CloudTrail?

CloudTrail is a service provided by Amazon Web Services (AWS) that records and stores API call activities and events within the AWS account. It captures information such as the identity of the caller, the time of the API call, the actions performed, and the response received. This data is stored in a log file, which can be viewed and analyzed for security, compliance, and troubleshooting purposes.

CloudTrail is helpful for security as it logs all API requests and actions performed in the cloud environment which enables responding to security threats faster.

CloudTrail logs API calls. It captures all API requests made by or on behalf of the Amazon cloud account.

Any change in the resources can be recorded using CloudTrail. With this tool, the client can keep track of who made the change, when the change was made, and who did the change.

Logs for the last 90 days, can be viewed in the console of the CloudTrail. They can also be downloaded based on a filter or a time range. They may contain all the information or a subset depending on the client’s needs.