Overview
Audit logging services (e.g., AWS CloudTrail, Google Cloud Audit Logs, Azure Monitor Activity Log) record 'who did what, where, and when' in your cloud account. They capture API calls and other significant events.
Key Features
- Immutability: Logs are typically stored in a way that prevents them from being altered or deleted.
- Compliance: Provides the necessary documentation for audits (e.g., SOC2, HIPAA, PCI-DSS).
- Security Analysis: Helps identify unauthorized access or suspicious activity.
- Troubleshooting: Allows you to see exactly what changes were made before an issue occurred.
Importance
A fundamental requirement for security and governance in the cloud.