AWS Loggings

Content from this AWS page. Very helpful summary for CP Test.

Logging features are available in the following AWS services:

Amazon CloudFront

Logs user requests that CloudFront receives.

AWS CloudTrail

Logs AWS API calls and related events made by or on behalf of an AWS account.

Amazon CloudWatch

Monitors your AWS Cloud resources and the applications you run on AWS. You can set alarms in CloudWatch based on metrics that you define.

AWS Config

Provides detailed historical information about the configuration of your AWS resources, including your IAM users, groups, roles, and policies.
For example, you can use AWS Config to determine the permissions that belonged to a user or group at a specific time.

Amazon Simple Storage Service (Amazon S3)

Logs access requests to your Amazon S3 buckets.