AWS CloudTrail
A service that records account activity and API calls for governance, auditing, and compliance.
It logs management API activity across an account by default for an audit trail; high-volume data events like S3 object access must be enabled separately.