AWS CloudTrail
AWS CloudTrail can be used for security, monitoring of AWS API calls, notification of threshold breaches, operational issues, filtering mechanisms for isolating data, faster root cause identification, and speedy resolution. CloudTrail can also be used for various compliance and governance controls, by helping you achieve compliance by logging API calls and changes to resources.
In the following section we will outline some of the best practices for AWS CloudTrail.