AWS CloudTrail provides auditing and monitoring capabilities by recording API activity across AWS services, including Amazon Bedrock.
CloudTrail events can include details such as the requesting identity, API operation, request timestamp, source IP address, and relevant error information.
These records help security teams investigate unauthorized or suspicious attempts to access Amazon Bedrock resources.
CloudTrail captures Bedrock management events, while certain data events require additional logging configuration. Organizations can analyze these events and integrate monitoring workflows with other AWS security services.
AWS Trusted Advisor provides infrastructure optimization and security recommendations but does not directly audit Bedrock model inputs and outputs.
Amazon QuickSight provides business intelligence capabilities, while Amazon Personalize generates personalized recommendations.
Therefore, AWS CloudTrail is the appropriate service for monitoring API activity and investigating unauthorized access attempts involving foundation models.
