Centralize AWS activity logs across all regions.
What it does
Sets up centralized AWS API activity logging across regions and provides a verified configuration report with security analysis queries.
When to use it
Use when setting up centralized API activity logging across all AWS regions.
How to use it
Give it a trail name, globally unique bucket name, and AWS region; it configures centralized logging and reports the verified setup.
What you provide
- a trail name
- a globally unique S3 bucket name
- an AWS region
Uses
Good to know
- cannot be undone: S3; CloudWatch Logs; AWS CloudTrail
- may override your rules
What you need · 1
Requires an AWS account identity with the listed CloudTrail, S3, CloudWatch Logs, and IAM permissions; broad FullAccess policies are prohibited.
Access · 7
This skill
S3
Configures billed S3 log storage (irreversible)
CloudWatch Logs
Configures billed CloudWatch log storage (irreversible)
AWS CloudTrail
Starts ongoing CloudTrail logging (irreversible)
Configures a multi-region CloudTrail trail