• Records AWS API calls for your account

  • Delivers log files of these calls

  • Logs:

    • API caller identity and source IP address

    • Time of the call

    • Request parameters

    • Response elements returned by the AWS service Must be activated in each region you want to use it

Log files for each region are stored where you specify; you can split them between storage locations or aggregate them into one Amazon S3 bucket.