AWS – Amazon VPC adds CloudTrail logging for VPC resources created by default

Amazon VPC has enhanced CloudTrail logging to include VPC resources created by default during a VPC creation. This enhancement offers improved visibility of VPC resources and aids in auditing and governance.

Prior to this, CloudTrail logs only included resources that were explicitly created by the customer. Customers had to manually curate list of default resources across their environment to comply with auditing requirements. With this launch, customers can view events that trigger the creation or deletion of default resources such as Security Group, Network ACL, Route Table, at the time of creation or deletion of the VPC. These events are logged under CloudTrail in the AWS Management Console.

CloudTrail logging for default VPC resources is available in all AWS commercial and the AWS GovCloud (US) Regions at no additional cost. To learn more about this feature, please refer to our documentation.
 

Read More for the details.