AWS CloudTrail

2025/11/20 - 2 updated api methods

Changes   AWS launches CloudTrail aggregated events to simplify monitoring of data events at scale. This feature delivers both granular and summarized data events for resources like S3/Lambda, helping security teams identify patterns without custom aggregation logic.

2025/11/19 - 1 new 3 updated api methods

Changes   AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations.

2025/05/29 - 2 new api methods

Changes   CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store

2025/01/24 - 1 new api methods

Changes   This release introduces the SearchSampleQueries API that allows users to search for CloudTrail Lake sample queries.

2024/11/22 - 6 new 7 updated api methods

Changes   This release introduces new APIs for creating and managing CloudTrail Lake dashboards. It also adds support for resource-based policies on CloudTrail EventDataStore and Dashboard resource.

2024/11/13 - 1 new 1 updated api methods

Changes   This release adds a new API GenerateQuery that generates a query from a natural language prompt about the event data in your event data store. This operation uses generative artificial intelligence (generative AI) to produce a ready-to-use SQL query from the prompt.

2024/05/30 - 1 updated api methods

Changes   CloudTrail Lake returns PartitionKeys in the GetEventDataStore API response. Events are grouped into partitions based on these keys for better query performance. For example, the calendarday key groups events by day, while combining the calendarday key with the hour key groups them by day and hour.

2024/01/18 - 1 new api methods

Changes   This release adds a new API ListInsightsMetricData to retrieve metric data from CloudTrail Insights.