Using AWS CloudTrail to audit AWS account activities. Setting up metrics and alerts using Amazon CloudWatch. Analyzing logs with AWS services such as Amazon Athena and CloudWatch Logs Insights.
using clodwatch log gropus in s3 bucket filtering by sql query // top api calls
cloud trail auidts stored in s3
we can open json format
TERMINATED instances auditing by squl querys
