Connectors

/

Sources

/

AWS CloudTrail

  • Source
  • Engineering Analytics
  • Alpha

Move AWS CloudTrail data anywhere it matters.

Sync AWS CloudTrail management events to any warehouse or AI app.

Source

AWS CloudTrail

  • Snowflake
  • BigQuery
  • Postgres
  • Databricks
  • Claude
Stream
1
Destinations
50+
Standard support
1.1.0

Overview

What is the Airbyte AWS CloudTrail connector?

The Airbyte AWS CloudTrail connector extracts data from AWS CloudTrail and loads it into 50+ destinations such as Snowflake, BigQuery, Databricks or Postgres, with full refresh and incremental sync. It publishes 1 stream you can select per connection.

  • 01

    Sync to your warehouse

    Land 1 AWS CloudTrail table in 50+ destinations on a schedule you control.

  • 02

    Incremental syncs

    Pull only the records that changed since the last run instead of reloading everything.

  • 03

    One authorization

    Authenticate AWS CloudTrail once and Airbyte keeps every scheduled sync running on it.

  • 04

    Cloud or self-hosted

    Run the AWS CloudTrail connector on Cloud, OSS, Hybrid.

1 stream

Every table you can sync from AWS CloudTrail

  • Management Events
    Sync modesFullIncr.

Setup

Live in 15 steps

  1. First, navigate to the AWS Management Console and log in to your account.

  2. Once logged in, search for the CloudTrail service and select it.

  3. In the CloudTrail dashboard, select the Trails option from the left-hand menu.

Configuration fields

AWS CloudTrail configuration fields
FieldTypeDescription
aws_key_id*stringAWS CloudTrail Access Key ID. See the docs for more information on how to obtain this key.
aws_region_name*stringThe default AWS Region to use, for example, us-west-1 or us-west-2. When specifying a Region inline during client initialization, this property is named region_name.
aws_secret_key*stringAWS CloudTrail Access Key ID. See the docs for more information on how to obtain this key.
lookup_attributes_filterobjectNot documented.
start_datestringThe date you would like to replicate data. Data in AWS CloudTrail is available for last 90 days only. Format: YYYY-MM-DD.

Hybrid deployment

Sovereign by architecture, not by policy.

The data plane runs in your environment. Records, credentials and keys stay with you; the control plane only receives configuration and job metadata.

  • Cloud
  • OSS
  • Hybrid

Your environment

DataConnectorsCredentialsKeys

↕ metadata only

Airbyte control plane

OrchestrationMonitoringUI

FAQ

AWS CloudTrail connector questions

What data can I sync from AWS CloudTrail with Airbyte?

1 stream: Management Events.

Does the AWS CloudTrail connector support incremental sync?

Yes. The AWS CloudTrail connector supports incremental sync on selected streams, and full refresh on every stream.

Where can I run the AWS CloudTrail connector?

Run the AWS CloudTrail connector on Cloud, OSS, Hybrid. Hybrid deployments keep the data plane in your environment while the control plane orchestrates syncs.

Didn't find your answer? Talk to sales

Start syncing AWS CloudTrail in minutes.

Free 14-day trial. No credit card needed.