Posted On: Mar 5, 2015
AWS CloudTrail integration with Amazon CloudWatch Logs is now available in 4 additional AWS regions: Sydney, Singapore, Frankfurt and Tokyo. With this feature, you can monitor for specific API activity and receive email notifications when those specific API calls are made.
After you configure CloudTrail integration with CloudWatch Logs, which you can do from the CloudTrail console or using the AWS SDKs or AWS CLI, CloudTrail begins to continuously and automatically deliver all the CloudTrail events associated with API activity to a CloudWatch Logs log group you specify. You can then use this CloudFormation template to create CloudWatch Alarms to monitor for critical network and security related API activity captured by CloudTrail and receive email notifications when those API calls are made. You can use the template as it is or make changes to the template to fit your own scenarios. Refer to the CloudTrail documentation user guide for step by step instructions on creating CloudWatch alarms using the CloudFormation template.
To configure CloudTrail integration with CloudWatch Logs, go to the CloudTrail console. Once you configure the integration, you will incur standard CloudWatch Logs and CloudWatch charges. For more details on pricing, go to CloudWatch pricing page.