Skip to main content
AWS CloudTrail records API activity and management events across your AWS account — who called what, when, from which source IP, and with which result. CloudTrail is the canonical audit trail and is also the underlying source for service-level activity logs (DynamoDB, Cognito, and others). EventBridge API Destinations — a CloudTrail-driven EventBridge rule delivers events to Bronto in real time over HTTPS, with no intermediate storage.

​
Alternatives

  • S3 Log Forwarder — CloudTrail’s native destination; the forwarder Lambda subscribes to the trail’s bucket and ships new objects.
  • Kinesis Firehose — for very high event volumes. Enable Send to CloudWatch Logs on the trail, then add a subscription filter on the trail’s log group targeting a Firehose stream. CloudTrail events are JSON, so Bronto flattens them into searchable fields automatically — no parser needed.
See Ingesting AWS Data into Bronto for the full service-to-method mapping.

​
References