AWS CloudTrail Features
Monitoring (3)
Audit Logging
Provides audit logs for compliance reasons.
Activity Logging
Monitors, records, and logs both real-time and post-event activity.
Anomaly Detection
Detects abnormal user behavior to mitigate risks.
Documentation - Audit Management (2)
Customizable Forms
Customize contracts and forms to collect specific information
Checklists
Provides checklists
Reporting (3)
Audit log
Creates a comprehnsive log of all activities when utilizing Privileged Access Management Software software.
Reporting
Includes reporting functionality.
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Generative AI (3)
AI Text Summarization
Condenses long documents or text into a brief summary.
AI Text Generation
Allows users to generate text based on a text prompt.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Additional Functionality (93)
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Approval Process Control
Manage the process of evaluating documents or requests submitted for approval
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Activity Tracking
Track and document all activities across devices, networks, and other systems
Data Verification
Process of checking different types of data for accuracy to avoid errors or inconsistencies
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Secure Data Storage
Securely stores data to prevent data loss or breaches
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Behavioral Analytics
Track and analyse user behavior within a system or network
Application Access Control
Define levels of authorization for access to specific applications
Multiple User Accounts
Allow multiple users with individual logins and varying permissions to use the same account, software, portal, or service
PCI Compliance
Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS)
API
Application programming interface that allows for integration with other systems/databases
User Activity Monitoring
Device Auto Discovery
Automatically scan the network for devices and take pre-defined actions upon discovery
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Threat Intelligence
Information to prevent, understand and identify cyber threats
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Document Management
Store, manage, and track all electronic documents in a centralized location
Developer Portal
Central hub for developers to access documentation, tools and resources
Activity Tracking
Track and document all activities across devices, networks, and other systems
API Governance
Enforce consistent standards and policies across the entire API lifecycle
API Design
Creation of a plan for an API to expose data and functionality to its users
API Lifecycle Management
Manage an API from its creation to deployment through updates, monitoring, and maintenance
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Application Management
Track, manage and store the applications of potential future members, customers or candidates
Dashboard
Assembly of graphs and charts for visualizing and tracking statistics/metrics
Usage Tracking/Analytics
Track and interpret metrics on the usage of company resources
Data Mapping
Track the management and flow of data throughout the organization
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Rules-Based Workflow
Automates and streamlines business processes by creating a sequence of predefined rules and actions that govern the flow of work
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Data Import/Export
Import and export data to and from software applications
Self Service Portal
Online portal through which end users can access the system, manage tasks, or obtain information
Multiple Data Sources
Allows users to manage data from a number of sources
Data Connectors
Connect to big data sources
Drag & Drop
Assemble applications and processes by dragging over and arranging pre-built components
Testing Management
Test specific APIs to determine if systems are properly functioning
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Data Synchronization
Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency
Real-Time Reporting
Active reporting of data and metrics
Database Support
Supports common databases such as MySQL and Oracle
Workflow Management
Create, design and manage workflows for repetitive tasks
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Mobile Access
Access software remotely via mobile devices
Corrective and Preventive Actions (CAPA)
Investigate and take action at root cause or error in processes to prevent recurring issues
Issue Management
Identify and respond to unexpected problems or failures (ie. "negative events")
Document Management
Store, manage, and track all electronic documents in a centralized location
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Activity Tracking
Track and document all activities across devices, networks, and other systems
Document Storage
Store and organize documents in a centralized system
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Task Management
Create, manage and track all task activities and progression
Workflow Management
Create, design and manage workflows for repetitive tasks
Status Tracking
Track the status over time for a request, process, asset, or transaction
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
Data Visualization
Graphical representation of data
Approval Process Control
Manage the process of evaluating documents or requests submitted for approval
Forms Management
Store, manage and track all forms in a centralized location
Change Management
Track and monitor efficient handling of all changes/transitions
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
Asset Tracking
Monitor the usage of assets, such as equipment, tools, software, etc., throughout their lifecycle
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
API
Application programming interface that allows for integration with other systems/databases
Risk Analysis
Analyze potential risks across the organization
Policy Management
Create, manage, and track policies and procedures within an organization
Incident Management
Manage and track all disruptions and incidents
Real-Time Reporting
Active reporting of data and metrics
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Risk Assessment
Initiate collection and analysis of known risks
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Version Control
Track revisions and updates made to files and navigate between different versions
Archiving & Retention
Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes
Alerts/Escalation
System alerts about the need to escalate an issue or request
Customizable Reports
Alter the layout and content of reports
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Certification Tracking
Maintain personal certifications/qualifications
Surveys & Feedback
Gauge satisfaction and receive information for improvement and success
Digital Signature
Electronic signing method that validates the authenticity and integrity of a digital document
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Reminders
Timed notification for any upcoming task, deadline, appointment, or activity
Reporting & Analytics - Audit Management (10)
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Audit Performance
Provide information on the performance of the audit activities and processes.
Industry Compliance
Ensures audits are compliant with industry-specific regulations and standards.
ISO Compliance
Guidelines set by the International Organization for Standardization
Environmental Compliance
Guidelines for conforming to environmental laws, regulations and requirements
Sarbanes-Oxley Compliance
Regulations on a company's internal process when dealing with financial reporting
FDA Compliance
Track and ensure quality of products in accordance with food and drug administration (FDA) act
OSHA Compliance
Enforces guidelines set by the Occupational Safety and Health Administration to remain legally compliant
Real-Time Data
Receive data and information in real time
Real-Time Analytics
Analyze and gain insights into data in real-time
Administration (14)
Policy, User, and Role Management
Creates access requirements and standards and establishes user, roles, and access rights.
Approval Workflows
Allows administrators to approve or reject access changes to using defined workflows.
Automated Provisioning
Automates provisioning and deprovisioning to reduce the amount of administrative manual work.
Bulk Changes
Reduces manual administrative work.
Centralized Management
Manages identity information from on-premise and cloud applications.
Self-Service Access Requests
Automatically allows access if users meet policy requirements.
Configurable Workflow
Configure existing workflows to meet your organization's needs
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
User Session Management
Maintain and control user sessions (including session tracking, timeouts and termination) in a web application or system
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Workflow Management
Create, design and manage workflows for repetitive tasks
Policy Management
Create, manage, and track policies and procedures within an organization
Access Management
Control and manage access to company resources
Endpoint Management
Track status, assign actions, and control access to systems for devices within the organization
Data Integration (4)
-
App Integration
The functionality at which APIs integrate with and perform within third-party applications.
-
Data Transformation
Translates complex datasets and backend systems into formats that can be interpreted by applications.
-
Plugins
Provides additional functionality for increased security, analytics, monitoring, and other features not included in the native feature set.
Real-Time Data
Receive data and information in real time
API Construction (4)
-
API Testing
Provides an environment for users to rest their API's functionality, efficiency, and data accuracy.
-
API Security
Protect APIs from threats using authentication, access control and encryption
-
Orchestration
Allows administrators to create APIs that utilize multiple backend resources and databases.
-
Scalability
Expands functionality while maintaining balanced loads. Serves growing demand without reducing functionality.
API Management (8)
-
Traffic Control
Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks.
-
Logs/Documentation
Records details related to usage and functionality for analytics and reporting.
-
API Monitoring
Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
-
Monetization
Allows administrators to manage pricing and billing of API integration with customer applications.
-
API Gateway
Manage and direct API requests between clients and backend services
Performance Monitoring
Monitoring and measurement of relevant metrics to assess the performance of IT resources
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Version Control
Track revisions and updates made to files and navigate between different versions
Workflows - Audit Management (5)
Audit Trail
Displays all the changes made during audits, including details such as username, timestamp, or type of change in a centralized repository.
Recommendations
Coordinate and track recommended remediation actions.
Collaboration Tools
Facilitates collaboration between teams and stakeholders through shared workspaces.
Integrations
Integrates with risk management platforms, GRC tools, and other systems.
Audit Planning
Create a targeted plan, schedule resources, and determine long-term goals for the audit process
Functionality (18)
Multi-Factor Authentication
Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate.
Single Sign-On
Provides a single access point for users to access multiple cloud products without multiple logins.
BYOD support
Enables users to bring-your-own-device to access company applications.
Password Vault
Stores credentials and passwords in a secure vault. Eliminates hard-coded passwords. Hides passwords from users.
Centralized management
Ensures that credentials are centrally stored (in a secure vault) and when changed, that systems remain connected.
Role-based security
Allows privileges based on roles, such as business unit or other factors.
Live notifications
Configure which events will trigger a notification to prevent privileged access abuse in real-time.
Live session recording & playback
Offers live session recording and playback for compliance and auditing purposes.
Hide passwords
Offers the option to hide passwords when sharing with users, such as contract workers
Temporary, time-limited privilege
Allows for temporary privileges for a defined task or period of time, to reduce the risk of credential abuse.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Remote Monitoring & Management
Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications
Credential Management
Manage usernames, account numbers, passwords, biometric data, public access keys, and other documentation
Incident Management
Manage and track all disruptions and incidents
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Multi-Factor Authentication
Request two or more credentials to prove user's identity before granting access to systems
Top-Rated Alternatives


