AWS Cloudwatch supports auditing, security monitoring, and operational troubleshooting through the tracking of user activity and API usage. CloudTrail records, continuously tracks, and preserves account activity tied to actions across your AWS infrastructure, so you can control storage, analysis, and remediation actions.

1. Navigate to the IAM configuration panel and select Users.

2. Add a new user by entering the name and selecting Programmatic access as the access type. Then click Next.

3. Choose Attach existing policies directly. Locate CloudWatchReadOnlyAccess and check it. Then click Next.

4. Click next from the tags page.

5. Create the user, then download the CSV file containing the access and secret keys.

6. Populate the following fields using the details obtained in the previous steps.

Configuring AWS Cloudwatch

7. In the CloudTrail panel, choose Create trail.

8. Enter the Trail name into the corresponding field.

9. Mark the checkbox for Select all S3 buckets in your account.

10. Complete the S3 bucket field. The bucket name has to be unique within S3. Then select Create.

11. Open the trail for editing by clicking its name.

12. Set up CloudWatch Logs.

13. Enter the group name, then continue.

14. Choose Allow so CloudTrail permissions are granted.

15. Click the button displayed below to activate the Unified Security Stack features associated with this integration.