Announcing AWS CloudTrail Event Aggregation and Insights for Data Events
AWS Cloud Operations Blog
This article announces two new AWS CloudTrail features for data events: event aggregation and insights capabilities.
- Event aggregation consolidates data events into 5-minute summaries, reducing data volume significantly
- Three aggregation templates available: API Activity, Resource Access, and User Actions
- Aggregated events can be queried using Amazon Athena or CloudWatch Log Insights
- Subscription filters enable sending only aggregated and management events downstream
- CloudTrail Insights now detects anomalies in data events, not just management events
- Two insight types: API call rates and API error rates deviations from baseline
- Baseline establishment takes up to 36 hours before insights are delivered
- Both features incur additional CloudTrail costs
These features help organizations reduce data volume costs, identify security anomalies, and streamline compliance monitoring for data events.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Nov 19
2025
2025
AWS CloudTrail adds data event aggregation to simplify security monitoring
Nov 20
2025
2025
AWS CloudTrail launches Insights for data events to automatically detect anomalies in data access
Dec 5
2025
2025
AWS launches simplified enablement of AWS CloudTrail events in Amazon CloudWatch
Oct 21
2025
2025
Amazon ECS now publishes AWS CloudTrail data events for insight into API activities
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.