What can I automate with CloudTrail in Sim?

You can look up events, describe trails, get trail, get trail status, and list trails with CloudTrail in Sim, plus 9 more CloudTrail tools listed on this page. Each runs as a tool inside an AI agent, so the agent can combine CloudTrail with any other connected service and apply LLM reasoning between steps.

How do I connect CloudTrail to Sim?

(1) Create a free account at sim.ai. (2) Create an agent in your workspace. (3) Drag a CloudTrail block onto the workflow builder. (4) Paste your CloudTrail API key to authenticate. (5) Pick a tool such as "Look Up Events", wire up its inputs, and click Run.

How do I look up events with CloudTrail in Sim?

Add a CloudTrail block to your agent and select "Look Up Events" as the tool. Look up AWS CloudTrail management or Insights events from the last 90 days in a Region. Fill in the required fields. Inputs can reference outputs from earlier steps, such as text generated by an AI block or data fetched from another integration.

Back to Integrations

CloudTrail integration for AI agents

Audit who did what in AWS with CloudTrail event history and Lake queries

View docs

Last updated September 5, 2026

What Sim agents can do with CloudTrail

Integrate AWS CloudTrail into workflows. Look up the last 90 days of management and Insights events by user, event name, resource, or access key; inspect trail configuration, logging status, and event selectors; and run SQL queries against CloudTrail Lake event data stores. This block never changes trail or event data store configuration, and never starts or stops logging. Starting and cancelling a Lake query are the only actions that are not reads, and AWS bills Lake queries on the data they scan. Requires AWS access key and secret access key.

Category: Security
Authentication: API key
Tools: 14
Triggers: 0
Documentation: CloudTrail docs

How to automate CloudTrail with Sim

Create a free account
Sign up at sim.ai in seconds. No credit card required. Your workspace is ready immediately.
Add a CloudTrail block
Open your workspace, drag a CloudTrail block onto the workflow builder, and paste in your CloudTrail API key.
Configure, connect, and run
Pick the tool you need, wire in an AI agent for reasoning or data transformation, and run. Your CloudTrail automation is live.

Agent templates

Ready-to-use templates featuring CloudTrail. Click any to build it instantly.

CloudTrail tools

14 CloudTrail tools available to Sim agents.

Look Up Events

Look up AWS CloudTrail management or Insights events from the last 90 days in a Region

Describe Trails

Retrieve the full configuration of one or more CloudTrail trails in the current Region

Get Trail

Retrieve the settings of a single CloudTrail trail by name or ARN

Get Trail Status

Check whether a CloudTrail trail is logging and surface its most recent delivery errors

List Trails

List the ARN, name, and home Region of every CloudTrail trail visible to the account

Get Event Selectors

Read which management, data, and network activity events a CloudTrail trail is configured to log

Get Insight Selectors

Read which CloudTrail Insights types are enabled on a trail or event data store

Start Lake Query

Start a CloudTrail Lake SQL query over an event data store

Describe Lake Query

Check the status, run time, and scan statistics of a CloudTrail Lake query

Get Lake Query Results

Fetch a page of result rows from a finished CloudTrail Lake query

Cancel Lake Query

Cancel a running CloudTrail Lake query

List Event Data Stores

List the CloudTrail Lake event data stores in the account for the current Region

Get Event Data Store

Retrieve the configuration of a single CloudTrail Lake event data store

List Tags

List the tags on CloudTrail trails, event data stores, dashboards, or channels

Frequently asked questions

Sim's CloudTrail integration adds 14 tools to the AI agents you build in Sim's visual workflow builder. Audit who did what in AWS with CloudTrail event history and Lake queries.