7.1

7.1 Create an AWS CloudTrail log in Console

Create an S3 Bucket for CloudTrail Trail

1. Go to the S3 console
2. Click the Create bucket button
3. Enter ceoa-7-cloudtrail-ACCOUNTID in the Bucket name field (replacing ACCOUNTID with your account id)
4. Click Next on the Configure Options screen
5. Click Next on the Set Permissions screen
6. Click Create bucket on the Review screen

Create a CloudTrail Trail

1. Go to the CloudTrail console
2. Click the Create trail button
3. Enter ccoa-cloudtrail in the Trail name field
4. Choose the checkbox next to Select all S3 buckets in your account in the Data events section
5. Choose the No radio button for the Create a new S3 bucket field in the Storage location section.
6. Choose the S3 bucket you just created from the S3 bucket dropdown.
7. Click the Create button