Posted On: May 28, 2014

We are excited to let you know that you can now log configuration changes to your Amazon CloudFront distributions through AWS CloudTrail, the AWS service that records API calls for your account and delivers log files to you. It can be used to enable security analysis, track changes to your AWS resource, and aid in compliance auditing. AWS CloudTrail logs can now include details for your configuration calls for Amazon CloudFront, including the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters, and the response elements returned by Amazon CloudFront.

If you are already using AWS CloudTrail, you will start seeing Amazon CloudFront API calls in your AWS CloudTrail log. If you haven't turned on AWS CloudTrail for your account, you can turn on CloudTrail from the AWS Management Console. There is no additional charge for turning on CloudTrail, but standard rates for Amazon S3 and Amazon SNS usage apply. Please visit the AWS CloudTrail detail page or the Amazon CloudFront Developer Guide to learn more.

To learn more about Amazon CloudFront, please visit the Amazon CloudFront detail page. You can also join technical experts from Amazon CloudFront for an interactive "Office Hours" session on June 25th, 2014 from 10:00 AM - 11:00 AM PST. This online session will enable technical audiences to interact directly with our engineers in the form of a live Q&A. Register for Amazon CloudFront Office Hours here.