AWS CloudTrail enables auditing, security monitoring, and operational monitoring by logging your AWS account activity. CloudTrail records two types of events: Management events that capture control plane actions such as creating or deleting Amazon S3 buckets, and data events that capture high-volume data plane actions such as reading or writing an Amazon S3 object.