Uncover blind spots in AWS data plane operations with CloudTrail Event Coverage
AWS CloudTrail introduces Event Coverage, a new console experience that provides visibility into data plane operations coverage at the account and organization level, helping customers quickly identify gaps in their logging posture.
AWS CloudTrail introduces Event Coverage, a new console experience that verifies data event logging across account and organization levels. It helps users confirm if data events-like Amazon S3 GetObject and PutObject-are enabled for AWS services and resource types, allowing detection of unauthorized data access or leaks. Insufficient data event coverage can create blind spots in security monitoring. Event Coverage displays all supported data event sources in one place and enables direct subscription from the dashboard, simplifying gap closure especially for organizations managing multiple accounts. The feature is available in all commercial AWS regions supported by CloudTrail.
Why it matters
This update is important for organizations and security teams that need to enhance security monitoring of AWS data plane operations. It allows for efficient identification of gaps in data event logging.