Cloud access logging records all API calls, resource access, and configuration changes in cloud environments. AWS CloudTrail, Azure Monitor, GCP Cloud Audit Logs.
Cloud logs are critical for forensics. Enable logging from day one — you can't go back and capture missed events. Alert on unusual API calls, especially those disabling logging itself.