CloudWatch Logs

CloudWatch is integrated with CloudTrail
CloudTrail provides record of actions taken by a user, role, or AWS service
CloudTrail captures API calls made by or on behalf of AWS account.
The calls captured include
- calls from CloudWatch console
- code calls to the CloudWatch API operations.
If trail is created, there is continuous delivery of CloudTrail events to S3 bucket
Actions logged in CloudTrail log files in CloudWatch are
- DeleteAlarms
- DeleteDashboards
- DescribeAlarmHistory
- DescribeAlarms
- DescribeAlarmsForMetric
- DisableAlarmActions
- EnableAlarmActions
- GetDashboard
- ListDashboards
- PutDashboard
- PutMetricAlarm
- SetAlarmState