AWS CloudTrail

Free plan · paid from $0.03

What the maker publishes

Archive export

Yes source

AWS support

The CloudTrail page links to AWS support options and expert assistance for getting started. source

CloudTrail Lake

CloudTrail Lake supports SQL queries, AI-powered natural-language query generation, and query-result summaries currently marked as in preview. source

Compliance use

AWS says CloudTrail logs can help demonstrate compliance with regulations such as SOC, PCI, and HIPAA. source

Deployment options

cloud source

Event aggregation

Data event aggregation consolidates events into five-minute summaries with trends such as access frequency, error rates, and most-used actions. source

Event history

Event history is enabled on all AWS accounts and provides a searchable, downloadable, immutable record of the past 90 days of management events in an AWS Region. source

Event types

CloudTrail records management, data, network activity, and Insights events. source

Free plan

Yes source

Intended users

AWS describes CloudTrail Lake as useful for IT auditors, security administrators, and DevOps engineers handling audit requirements, policy checks, and operational troubleshooting. source

Lake availability limit

CloudTrail Lake will no longer be open to new customers starting May 31, 2026; AWS points to Amazon CloudWatch for similar capabilities. source

Live log tailing

No source

Log integrity and encryption

CloudTrail can validate whether delivered log files were changed or deleted, and encrypts files in S3 by default with server-side encryption, with AWS KMS encryption available as an additional option. source

Log pipelines

No source

Multi-account

Trails can capture and store events from multiple AWS accounts using AWS Organizations. source

Non-AWS sources

CloudTrail Lake can consolidate events from other cloud providers, in-house applications, and SaaS applications running in the cloud or on premises. source

Purpose

CloudTrail tracks user activity and API calls across AWS services for auditing, security monitoring, and operational troubleshooting. source

Structured log parsing

Yes source

Trails and integrations

Trails deliver activity events to Amazon S3, with optional delivery to CloudWatch Logs and Amazon EventBridge, and logs can be analyzed with Amazon Athena. source

Checked against the maker's pages on 7 Oct 2026.