How to load data from AWS CloudTrail to Firebolt
Learn how to use Airbyte to synchronize your AWS CloudTrail data into Firebolt within minutes.


Building your pipeline or Using Airbyte
Airbyte is the only open source solution empowering data teams to meet all their growing custom business demands in the new AI era.
Building in-house pipelines
- Inconsistent and inaccurate data
- Laborious and expensive
- Brittle and inflexible
After Airbyte
- Reliable and accurate
- Extensible and scalable for all your needs
- Deployed and governed your way
Start syncing with Airbyte in 3 easy steps within 10 minutes



Take a virtual tour
Demo video of Airbyte Cloud
Demo video of AI Connector Builder
Setup Complexities simplified!
Simple & Easy to use Interface
Airbyte is built to get out of your way. Our clean, modern interface walks you through setup, so you can go from zero to sync in minutes—without deep technical expertise.
Guided Tour: Assisting you in building connections
Whether you’re setting up your first connection or managing complex syncs, Airbyte’s UI and documentation help you move with confidence. No guesswork. Just clarity.
Airbyte AI Assistant that will act as your sidekick in building your data pipelines in Minutes
Airbyte’s built-in assistant helps you choose sources, set destinations, and configure syncs quickly. It’s like having a data engineer on call—without the overhead.
What sets Airbyte Apart
Modern GenAI Workflows
Streamline AI workflows with Airbyte: load unstructured data into vector stores like Pinecone, Weaviate, and Milvus. Supports RAG transformations with LangChain chunking and embeddings from OpenAI, Cohere, etc., all in one operation.
Move Large Volumes, Fast
Quickly get up and running with a 5-minute setup that enables both incremental and full refreshes for databases of any size, seamlessly scaling to handle large data volumes. Our optimized architecture overcomes performance bottlenecks, ensuring efficient data synchronization even as your datasets grow from gigabytes to petabytes.
An Extensible Open-Source Standard
More than 1,000 developers contribute to Airbyte’s connectors, different interfaces (UI, API, Terraform Provider, Python Library), and integrations with the rest of the stack. Airbyte’s AI Connector Builder lets you edit or add new connectors in minutes.
Full Control & Security
Airbyte secures your data with cloud-hosted, self-hosted or hybrid deployment options. Single Sign-On (SSO) and Role-Based Access Control (RBAC) ensure only authorized users have access with the right permissions. Airbyte acts as a HIPAA conduit and supports compliance with CCPA, GDPR, and SOC2.
Fully Featured & Integrated
Airbyte automates schema evolution for seamless data flow, and utilizes efficient Change Data Capture (CDC) for real-time updates. Select only the columns you need, and leverage our dbt integration for powerful data transformations.
Enterprise Support with SLAs
Airbyte Self-Managed Enterprise comes with dedicated support and guaranteed service level agreements (SLAs), ensuring that your data movement infrastructure remains reliable and performant, and expert assistance is available when needed.
What our users say

Raman Singh
Predictable, straightforward pricing model that simplified budgeting and significantly reduced overall spend

Chase Zieman

“Airbyte helped us accelerate our progress by years, compared to our competitors. We don’t need to worry about connectors and focus on creating value for our users instead of building infrastructure. That’s priceless. The time and energy saved allows us to disrupt and grow faster.”

Rupak Patel
"With Airbyte, we could just push a few buttons, allow API access, and bring all the data into Google BigQuery. By blending all the different marketing data sources, we can gain valuable insights."
How to Sync to Manually
Step 1: Enable AWS CloudTrail and Configure S3 Bucket
First, ensure that AWS CloudTrail is enabled in your AWS account. Configure CloudTrail to deliver logs to an Amazon S3 bucket. In the AWS Management Console, navigate to CloudTrail, create a new trail or modify an existing one, and specify an S3 bucket where the logs will be stored.
Step 2: Set Up AWS IAM Roles and Policies
Create an AWS Identity and Access Management (IAM) role with the necessary permissions. This role should allow access to the S3 bucket containing the CloudTrail logs. Define a policy that grants `s3:GetObject` permission for the S3 bucket and attach it to the role to ensure seamless access when extracting logs.
Step 3: Download CloudTrail Logs from S3
Use the AWS CLI to download the CloudTrail logs from your specified S3 bucket. The command `aws s3 cp s3:/// / --recursive` can be used to recursively copy files from the S3 bucket to a local directory on your machine or a secure EC2 instance.
Step 4: Transform CloudTrail Logs to CSV Format
AWS CloudTrail logs are stored in JSON format. Write a script in Python, using libraries like `json` and `csv`, to parse the JSON logs and convert them into a CSV format. Ensure that the CSV headers reflect the necessary data fields you want to import into Firebolt.
Step 5: Set Up Firebolt Database and Table
Access your Firebolt account and set up a database if you haven’t already. Create a new table with a schema that matches the structure of your CSV file. Use Firebolt’s SQL console to define the table with the appropriate columns and data types.
Step 6: Load CSV Data into Firebolt Using S3 External Tables
Upload the transformed CSV files back to an S3 bucket if necessary for access from Firebolt. Create an external table in Firebolt that points to your S3 bucket location. Use Firebolt’s SQL syntax to create an external table that can read your CSV files from S3, then use an `INSERT INTO` statement to load the data from the external table into your Firebolt table.
Step 7: Automate the Process with AWS Lambda
To automate the data transfer process, create an AWS Lambda function that triggers every time new CloudTrail logs are delivered to your S3 bucket. The Lambda function should execute the data download, transformation, and loading steps automatically. Use AWS CloudWatch Events to trigger the Lambda function based on S3 object creation events.
By following these steps, you can efficiently move data from AWS CloudTrail to Firebolt without relying on third-party connectors or integrations.