AWS CloudTrail adds data event aggregation to simplify security monitoring

CloudTrail Aggregated Events

AWS introduces CloudTrail aggregated events, a new feature that simplifies monitoring and analyzing CloudTrail data events at scale. This feature consolidates high-volume AWS API activity into 5-minute summaries, highlighting key trends such as access frequency, error rates, and most-used actions.

Security, compliance, and operations teams can efficiently monitor data access patterns without processing massive numbers of individual events. You can enable aggregation in your trails through the AWS console or CLI, and choose from pre-built aggregation templates for API activity, resource access, and user activity summaries.

What to do

• Enable aggregation in your trails capturing data events.
• Choose from pre-built aggregation templates.
• Review the CloudTrail trail documentation for more information.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.