1. Features
   1. Always on
   2. Deliver ongoing events for storage or monitoring
      1. S3
      2. CloudWatch
      3. EventBridge
   3. Multi-region
   4. Multi-account
   5. Log file integrity validation
   6. Log file encryption
   7. CloudTrail Insights
   8. CloudTrail Lake
      1. Event Data Store
      2. Run SQL queries
      3. Hands-on demo video (12min)
2. CloudTrail Logs
   1. Query with Amazon Athena
   2. Monitor with CloudWatch Logs
      1. Alarms
      2. Notifications
   3. Partners
      1. Log Management and Analysis
      2. Services
3. Monitors and records
   1. AWS user activity
   2. AWS API usage
   3. Support for AWS Organizations
4. CloudTrail event types
   1. Management or control plane events (default)
   2. Data (data plane) events
   3. CloudTrail Insights events
5. Typical use cases
   1. Audit activity
   2. Identify security incidents
   3. Troubleshoot operational issues
6. Security best practices
7. Amazon CloudTrail Security Blogs
8. Amazon CloudTrail FAQs
9. Free Cybersecurity Training
10. AWS CloudTrail Pricing
11. AWS CloudTrail User Guide