AWS CloudTrail trail should have global service events enabled
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
Ensure that an AWS CloudTrail trail has global service events enabled.
Rationale
Easily troubleshoot security issues for global services that aren’t region-specific.
From the console
By default, trail logs created in the CloudTrail console log global service events. For more information, see the About global service events docs.
From the command line
Run aws cloudtrail describe-trails
Run update-trail
on any returned trail name above to include-global-service-events.
aws cloudtrail update-trail \
--name <INSERT-TRAIL-NAME> \
--include-global-service-events
NOTE: The trail must be located in us-east-1
region to include global service events. Enabling global service events automatically updates the trail to be multi-regional.