AWS Organizations emits CloudTrail events for account membership changes
News
This article announces that AWS Organizations now emits CloudTrail events for account membership changes, providing enhanced visibility into organizational security.
- New CloudTrail events track when accounts join or leave organizations
- AccountJoinedOrganization event captures join method (Created/Invited) and timestamp
- AccountDepartedOrganization event records departure method (Left/Removed/Cleaned) and timestamp
- Enables real-time notifications via CloudWatch alarms and EventBridge rules
- Supports fraud detection, compliance auditing, and security monitoring
- Available in all commercial AWS Regions, GovCloud, and China Regions
These new events enhance security visibility by automatically tracking organizational membership changes, enabling rapid detection and response to unauthorized activities.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Jul 20
2026
2026
Selectively log network activity events by identity in AWS CloudTrail
May 27
2026
2026
Amazon S3 audit logging, Part 2: Centralized logging and analysis of S3 data events in AWS CloudTrail for security and compliance
Nov 19
2024
2024
Important changes to CloudTrail events for AWS IAM Identity Center
May 11
2025
2025
Announcing AWS CloudTrail network activity events for VPC Endpoints
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.