Monitor AWS API calls, console sign-ins, and resource changes

API calls, console sign-ins, and resource changes.

Visit AWS CloudTrail
Jutsu
Live today

How Jutsu works with AWS CloudTrail

Launch a CloudFormation stack from Jutsu and a cross-account role with a unique external ID lets Jutsu ingest the AWS API calls, console sign-ins, and resource changes that CloudTrail delivers. No access key is copied into Jutsu.

What you can do

  • Ingest AWS API calls, console sign-ins, and resource changes
  • Connect with a CloudFormation stack and a cross-account role
  • Reuse existing trails and choose which ones Jutsu ingests

How it connects

  1. Connect in minutes

    Authenticate with your existing credentials: no agents to deploy, no data to migrate.

  2. Jutsu investigates

    AI SOC agents triage, enrich, and correlate every signal automatically, around the clock.

  3. Act with confidence

    Get analyst-grade verdicts and one-click response, with humans always in control.

AWS CloudTrail setup guide

More SIEM & Log Sources

Wazuh

Available now

Open-source security monitoring and threat detection.

Google Workspace

Available now

Gmail security, audit logs, and directory events.

Google Cloud Platform

Available now

Cloud Audit Logs for IAM, API, and resource activity.

All integrations

Start with the security your startup needs now

Connect your first source on the Free plan with no credit card, or book a demo to see Jutsu on your own alerts.

Start free

Subscribe to our newsletter

Get the latest security tips, product updates, and news delivered to your inbox.