This service is hands down the easiest way to save and analyze any activity regarding your AWS environment.

Whenever you need any metric to be audited regarding your AWS account or the services that run under it, just create a custom trail that fulfills your needs and CloudTrail will immediately start to save logs. You can inspect from permissions to SDKs.

There is nothing to dislike. In the begging we had issues managing audit access for our stakeholders, later on, we started to export the logs, and everything run flawlessly after this.

Used to audit the activities on the cloud devices and alert for services on a threshold setup once breached. Storing of logs easily in S3. Amazing analytics provided by the trace logging.

The smart feature of managing each device being run on the cloud and the alerting capability of the tool.

The graphs could be better and integration with various other tools could be more versatile. Cost could be lower.

Cloudtrail is important to monitor activities across multiple resources - such as programmatic changes that were made to resources or even bad actors since it fully logs all activities on AWS resources (such as various DBs).

The biggest challenge with using Cloudtrail is effectively filtering for activity you're interested in. This is more from the nature of the problem than Cloudtrail itself. The thoroughness of the information being logged within Cloudtrail includes quite a bit of information that is not necessarily relevant for incident management.

Awesome, our SOX audits with KPMG have become much smoother after we started using this software

I like the way in which AWS Cloudtrail helps in compliance with various SOX audit protocols which leads to higher governance standards. It also helps in troubleshooting issues with much easiness. Also it is very easy to keep all the records related to changes without too much effort.

The Cost is on a higher side, if the cost is rationalized with other audit trail software's, it might become a market leader