You can view, filter, and download the most recent 90 days of your account activity for all management events in supported AWS services free of charge.

You can set up a trail that delivers a single copy of management events in each region free of charge. Once a CloudTrail trail is set up, Amazon S3 charges apply based on your usage. You will be charged for any data events or additional copies of management events recorded in that region.

Management events

Data events

Pricing examples

Example 1

Your AWS account does not have AWS CloudTrail set up. Management event activity is recorded by AWS CloudTrail for the last 90 days, and can be viewed and searched free of charge from the AWS CloudTrail console, or by using the AWS CLI.

Example 2

Your AWS account has one CloudTrail trail. The trail is configured to capture only management events, and deliver them to the S3 bucket that you define. You pay the S3 storage cost for these events, but pay no CloudTrail charges, because the first copy of management events is free. As in Example 1, you can search the last 90 days of events in the CloudTrail console, or by using the AWS CLI. You can also use the logs that CloudTrail has saved in your S3 bucket.

Example 3

Your AWS account has two CloudTrail trails. Both trails are configured to capture management events; neither trail is configured to capture data events. You pay the S3 storage cost for all events. You also pay CloudTrail charges for the second trail at the rate of $2.00 per 100,000 management events, because each additional copy of management events incurs charges.

Example 4

Your AWS account has one trail that is configured to capture management events and all S3 data events, and deliver them to the S3 bucket that you define. You pay the S3 storage cost for these events. You pay no charges for management events because the first copy of management events is free. However, you pay $0.10 per 100,000 data events because all copies of data events incur charges.

Example 5

Your AWS account has two CloudTrail trails. One trail captures management events; the second trail captures only data events. Both trails deliver events to the S3 bucket(s) that you define. You pay the S3 storage cost for all events. You pay no charges for management events because the first copy of management events is free. However, you pay $0.10 per 100,000 data events because all copies of data events incur charges. The charges for this example are the same as the charges for Example 4.

Once a CloudTrail trail is set up, Amazon S3 charges apply based on your usage, since AWS CloudTrail delivers logs to an S3 bucket. Typical Amazon S3 charges are less than $3 per month for most accounts.

You can optionally specify an Amazon SNS topic to get notified about CloudTrail log file delivery to Amazon S3, send CloudTrail logs to CloudWatch Logs, or encrypt your CloudTrail logs using AWS Key Management Service (AWS KMS). When these features are used, standard usage charges for the related services apply. For this pricing information, see the pricing page for each service.

Additional pricing resources

TCO Calculator

Calculate your total cost of ownership (TCO)

Simple Monthly Calculator

Easily calculate your monthly costs with AWS

Economics Resource Center

Additional resources for switching to AWS

Learn how to get started with AWS CloudTrail

Visit the getting started page
Ready to build?
Get started with AWS CloudTrail
Have more questions?
Contact us