- Source
- Engineering Analytics
- Alpha
Move AWS CloudTrail data anywhere it matters.
Sync AWS CloudTrail management events to any warehouse or AI app.
Source
AWS CloudTrail

Snowflake
BigQuery
Postgres
Databricks
Claude
- Stream
- 1
- Destinations
- 50+
- Standard support
- 1.1.0
Overview
What is the Airbyte AWS CloudTrail connector?
The Airbyte AWS CloudTrail connector extracts data from AWS CloudTrail and loads it into 50+ destinations such as Snowflake, BigQuery, Databricks or Postgres, with full refresh and incremental sync. It publishes 1 stream you can select per connection.
- 01
Sync to your warehouse
Land 1 AWS CloudTrail table in 50+ destinations on a schedule you control.
- 02
Incremental syncs
Pull only the records that changed since the last run instead of reloading everything.
- 03
One authorization
Authenticate AWS CloudTrail once and Airbyte keeps every scheduled sync running on it.
- 04
Cloud or self-hosted
Run the AWS CloudTrail connector on Cloud, OSS, Hybrid.
1 stream
Every table you can sync from AWS CloudTrail
Management Events Sync modes FullIncr.
Setup
Live in 15 steps
First, navigate to the AWS Management Console and log in to your account.
Once logged in, search for the CloudTrail service and select it.
In the CloudTrail dashboard, select the Trails option from the left-hand menu.
Click on the name of the trail you want to use as your source connector.
In the trail details page, scroll down to the section labeled "Management events" and click on the "Edit" button.
In the "Data events" section, click on the "Add data event" button.
Select the type of data event you want to capture and configure the settings as needed.
Once you have configured the data event, click on the "Save" button to save your changes.
Next, navigate to the Airbyte dashboard and select the "Sources" option from the left-hand menu.
Click on the "Create a new source" button and select the AWS CloudTrail connector.
Enter your AWS access key ID and secret access key in the appropriate fields.
Enter the name of the S3 bucket where your CloudTrail logs are stored.
Enter the name of the CloudTrail trail you want to use as your source connector.
Click on the "Test" button to ensure that your credentials are valid and that Airbyte can connect to your CloudTrail logs.
Once the test is successful, click on the "Create" button to create your AWS CloudTrail source connector in Airbyte.
Configuration fields
| Field | Type | Description |
|---|---|---|
| aws_key_id* | string | AWS CloudTrail Access Key ID. See the docs for more information on how to obtain this key. |
| aws_region_name* | string | The default AWS Region to use, for example, us-west-1 or us-west-2. When specifying a Region inline during client initialization, this property is named region_name. |
| aws_secret_key* | string | AWS CloudTrail Access Key ID. See the docs for more information on how to obtain this key. |
| lookup_attributes_filter | object | Not documented. |
| start_date | string | The date you would like to replicate data. Data in AWS CloudTrail is available for last 90 days only. Format: YYYY-MM-DD. |
Hybrid deployment
Sovereign by architecture, not by policy.
The data plane runs in your environment. Records, credentials and keys stay with you; the control plane only receives configuration and job metadata.
- Cloud
- OSS
- Hybrid
Your environment
Airbyte control plane
FAQ
AWS CloudTrail connector questions
What data can I sync from AWS CloudTrail with Airbyte?
1 stream: Management Events.
Does the AWS CloudTrail connector support incremental sync?
Yes. The AWS CloudTrail connector supports incremental sync on selected streams, and full refresh on every stream.
Where can I run the AWS CloudTrail connector?
Run the AWS CloudTrail connector on Cloud, OSS, Hybrid. Hybrid deployments keep the data plane in your environment while the control plane orchestrates syncs.
Didn't find your answer? Talk to sales
Start syncing AWS CloudTrail in minutes.
Free 14-day trial. No credit card needed.