AWS CloudTrail
AWS CloudTrail tracks user activity and API usage across your account. It logs every action taken via the console, SDK, or CLI, giving you a comprehensive audit trail of who did what and when. This visibility is essential for understanding resource changes and maintaining security posture without needing third-party agents.
It fits teams needing basic, always-free visibility into account activity. Since there is no paid tier mentioned, the trade-off is limited scope; it covers API calls but lacks advanced analytics or retention features found in paid logging services. You get the raw data for free, but you handle the storage and analysis yourself.