AWS CloudTrail network activity events for VPC endpoints now generally available

AWS has announced the general availability of network activity events for Amazon VPC endpoints in AWS CloudTrail, providing enhanced security and monitoring capabilities.

• Enables logging of AWS API activity traversing VPC endpoints
• Helps detect potential data exfiltration and unauthorized access
• Provides comprehensive visibility across AWS accounts
• Allows detection of external credentials accessing VPC endpoints
• Supports compliance monitoring without decrypting TLS traffic

The feature allows users to create custom log trails, filter network activity events, and analyze them using tools like CloudTrail Lake and Amazon Athena. It is now available in all commercial AWS Regions.