Amazon Web Services → Microsoft Azure
Azure equivalent of AWS CloudTrail
AWS CloudTrail maps to the Azure Monitor activity log for resource operations, plus Microsoft Entra audit and sign-in logs for identity events.
About AWS CloudTrail
| Provider | Amazon Web Services |
|---|---|
| Status | Generally available |
| What it is | Records API activity. Event history gives 90 days of management events for free, trails deliver events to S3 and CloudWatch Logs, and CloudTrail Lake stores and queries events with SQL. |
| Documentation | docs.aws.amazon.com |
| Pricing | Official pricing page |
Azure mappings (1)
| Capability | Azure equivalent | Match |
|---|---|---|
| API and control-plane audit logs | Azure Monitor activity log (and Entra audit logs) | Direct match |
Audit, configuration & compliance(1)
API and control-plane audit logs Direct match
AWS CloudTrail maps to the Azure Monitor activity log for resource operations, plus Microsoft Entra audit and sign-in logs for identity events. Resource-level data-plane logs come from each service's diagnostic settings.
- Retention. CloudTrail event history keeps 90 days of management events free, and trails or CloudTrail Lake keep events longer. The activity log keeps 90 days free, and diagnostic settings export it to Log Analytics, storage, or Event Hubs for longer retention.
- Data events. CloudTrail data events (for example, S3 object reads) are opt-in on trails. On Azure, data-plane activity comes from resource logs (such as Storage or Key Vault diagnostic logs).
- Organization-wide. CloudTrail organization trails cover all accounts. On Azure, apply diagnostic settings at scale with Azure Policy.