Logs for actions on amazon s3 / other AWS services

Question

I am trying to see which user was responsible for changes in S3 (at buckets level). I could not find an audit trail for actions done at S3 bucket level or EC2 who created instances. Beanstalk has a log of the actions the machine performed, but not which user.

Is there a way around AWS that we can see this information in IAM or any other location?

Answer 1

You can use AWS CloudTrail which can be used to auditing API calls.

https://aws.amazon.com/cloudtrail/ 

Check out this article which deals with cloud trail capturing the AWS API activity:

https://aws.amazon.com/blogs/aws/aws-cloudtrail-capture-aws-api-activity/