Logging and Monitoring

You can use CloudTrail to record API calls to a private CA by AppStream 2.0. For more information see What Is AWS CloudTrail? and Using CloudTrail. In CloudTrail Event history you can view GetCertificate and IssueCertificate event names from acm-pca.amazonaws.com event source made by the AppStream 2.0EcmAssumeRoleSession user name. These events will be recorded for every AppStream 2.0 certificate-based authentication request. For more information, see Viewing events with CloudTrail Event history.