AWS CloudTrail Checklist: Coverage and Evidence
Check CloudTrail coverage, delivery, integrity, retention and retrieval against your evidence needs. Use the retrieval record to document an authorized test and distinguish recent Event history from a protected archive.