Uncover blind spots in AWS data plane operations with CloudTrail Event Coverage

AWS CloudTrail introduces Event Coverage, a new console experience that gives customers visibility into their data plane operations coverage at the account and organization level.

• View which AWS services and resource types have data event logging enabled or disabled
• Identify gaps in logging posture without manually scanning multiple accounts
• Track data plane operations like S3 object-level GetObject and PutObject calls
• Detect unauthorized data access and exfiltration attempts
• Subscribe to data events directly from the dashboard to close coverage gaps
• Available in all commercial AWS Regions where CloudTrail is supported

Event Coverage simplifies security monitoring by consolidating visibility across all supported data event sources, reducing blind spots in multi-account environments.