Which is better ? AWS S3 bucket logs vs AWS cloudtrail

Question

What's the difference between the AWS S3 logs and the AWS Cloudtrail? In the docs of cloud trail I saw this:

CloudTrail adds another dimension to the monitoring capabilities already offered by AWS. It does not change or replace logging features you might already be using.

Answer 1

AWS CloudTrail is a web service which tracks API usage of your AWS account. To login into your AWS Management Console, it calls a signin API. Even that will be recorded in CloudTrail. These recorded logs are JSON files and they will be stored in an S3 bucket.

You can create your own trails which only monitor a set of APIs or a specific bucket. 5 trails are allowed per region. 

The definition you have provided from the documentation means; if you have already enabled any logging capabilities of AWS services, enabling CloudTrail will not modify it in any way. You can also set up Data Event trails which basically track data event API calls like Putobject, getobject or deleteobject.

Want to learn more about AWS, and become a master by enrolling for Intellipaat's AWS Certification Training!