CloudTrail
Audit who did what in AWS with CloudTrail event history and Lake queries
CloudTrail is a Security integration for Sim, the AI workspace where teams build and deploy AI agents. Sim's CloudTrail integration provides 14 CloudTrail tools that AI agents can use inside Sim's visual workflow builder. CloudTrail connects with an API key. Free to start at sim.ai.
Last updated
Overview
Integrate AWS CloudTrail into workflows. Look up the last 90 days of management and Insights events by user, event name, resource, or access key; inspect trail configuration, logging status, and event selectors; and run SQL queries against CloudTrail Lake event data stores. This block never changes trail or event data store configuration, and never starts or stops logging. Starting and cancelling a Lake query are the only actions that are not reads, and AWS bills Lake queries on the data they scan. Requires AWS access key and secret access key.
How to automate CloudTrail with Sim
Create a free account
Sign up at sim.ai in seconds. No credit card required. Your workspace is ready immediately.
Add a CloudTrail block
Open your workspace, drag a CloudTrail block onto the workflow builder, and paste in your CloudTrail API key.
Configure, connect, and run
Pick the tool you need, wire in an AI agent for reasoning or data transformation, and run. Your CloudTrail automation is live.
Agent templates
Ready-to-use templates featuring CloudTrail. Click any to build it instantly.
Supported tools
14 CloudTrail tools available in Sim
Look Up Events
Look up AWS CloudTrail management or Insights events from the last 90 days in a Region
Describe Trails
Retrieve the full configuration of one or more CloudTrail trails in the current Region
Get Trail
Retrieve the settings of a single CloudTrail trail by name or ARN
Get Trail Status
Check whether a CloudTrail trail is logging and surface its most recent delivery errors
List Trails
List the ARN, name, and home Region of every CloudTrail trail visible to the account
Get Event Selectors
Read which management, data, and network activity events a CloudTrail trail is configured to log
Get Insight Selectors
Read which CloudTrail Insights types are enabled on a trail or event data store
Start Lake Query
Start a CloudTrail Lake SQL query over an event data store
Describe Lake Query
Check the status, run time, and scan statistics of a CloudTrail Lake query
Get Lake Query Results
Fetch a page of result rows from a finished CloudTrail Lake query
Cancel Lake Query
Cancel a running CloudTrail Lake query
List Event Data Stores
List the CloudTrail Lake event data stores in the account for the current Region
Get Event Data Store
Retrieve the configuration of a single CloudTrail Lake event data store
List Tags
List the tags on CloudTrail trails, event data stores, dashboards, or channels
Frequently asked questions
Sim's CloudTrail integration adds 14 CloudTrail tools to the AI agents you build in Sim's visual workflow builder — you build it all visually. Audit who did what in AWS with CloudTrail event history and Lake queries. Teams often pair CloudTrail with Affinity and incident.io in the same agent.
Start automating CloudTrail today
Build your first AI agent with CloudTrail in minutes. Connect to every tool your team uses. Free to start, no credit card required.