AWS CloudTrail service helps with governance, compliance, operational auditing, and risk auditing of your AWS account. You can log and monitor account activity related to actions across your AWS infrastructure. CloudTrail provides a history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.
There are several other AWS management tools that can help you in the provisioning, configuration management, monitoring and performance, governance and compliance, and resource optimization of your cloud resources and environment.