AWS – AWS CloudTrail now provides relevant user statistics to act on anomalies detected by CloudTrail Insights

CloudTrail Insights now helps you correlate user identities, user agents, and error codes associated with unusual levels of API activity. Now, you can identify the IAM users and roles with the highest levels of API activity during both periods of anomalous activity, and normal activity. This capability helps you analyze and act on anomalies without manually searching through a large number of CloudTrail events.

Read More for the details.