AWS CloudTrail launches network activity events for VPC endpoints (preview)

AWS CloudTrail has launched a new feature called network activity events for VPC endpoints, providing additional visibility into AWS API activity that traverses your VPC endpoints.

Specifically, the article covers:

• Network activity events for VPC endpoints are available in preview for Amazon EC2, AWS KMS, AWS Secrets Manager, and AWS CloudTrail services.
• This feature allows you to view details of who is accessing resources within your network, enabling you to identify and respond to malicious or unauthorized actions.
• You can turn on logging for network activity events using the CloudTrail console, CLI, or SDKs, with options to log all API calls or only access denied calls, and use advanced event selectors for filtering.
• This feature is available in all commercial AWS Regions, and pricing information can be found on the CloudTrail pricing page.