AWS service that records all API calls made in your account for security and compliance. Like a detailed security log that tracks who did what and when.
Security teams use CloudTrail to investigate suspicious activity by seeing exactly which actions were performed and by whom.
All of these services record control-plane activity (who did what, when, from where) for security, compliance, and troubleshooting. AWS CloudTrail focuses on AWS API events (management events) and can also capture data events for certain services (for example, S3 object-level and Lambda invoke events). Azure Activity Log captures subscription-level events and integrates with Azure Monitor/Log Analytics. GCP Cloud Audit Logs captures Admin Activity, Data Access, and System Event logs. OCI Audit records API calls and console actions across OCI compartments.