Find your logging gaps before they become compliance gaps with CloudTrail Data Event Coverage

AWS CloudTrail introduces a Data Event Coverage page in the console, giving organizations a single view of how well their resources are covered by data event logging for security auditing and compliance.

• Coverage score dashboard breaks down data event logging by service category (Storage, Compute, Database, AI, etc.)
• Identifies exactly which resources are covered and which have logging gaps, filterable by resource type or ARN
• Supports organization-wide visibility across multiple accounts and regions with AWS Resource Explorer integration
• One-click remediation to enable data events directly from the page without navigating individual trails
• Discovers newly supported resource types automatically as AWS adds data event logging capabilities
• Helps meet compliance requirements for SOC 2, PCI DSS, and HIPAA that mandate detailed data-plane audit trails

The Data Event Coverage page eliminates manual inspection of trail configurations, enabling security teams to establish baselines, identify gaps, and close them efficiently at scale.