7.1

7.1 Create an AWS CloudTrail log in Console

Create an S3 Bucket for CloudTrail Trail

1. Go to the S3 console.
2. Click the Create bucket button.
3. Enter ceoa-7-cloudtrail-ACCOUNTID in the Bucket name field. Replace ACCOUNTID with the results of the following command: aws sts get-caller-identity --output text --query 'Account'.
4. Click Next on the Configure Options screen.
5. Click Next on the Set Permissions screen.
6. Click Create bucket on the Review screen.

Create a CloudTrail Trail

1. Go to the CloudTrail console
2. Click the Create trail button.
3. Enter ceoa-7-cloudtrail in the Trail name field.
4. Choose the checkbox next to Select all S3 buckets in your account in the Data events section.
5. Choose the No radio button for the Create a new S3 bucket field in the Storage location section.
6. Choose the S3 bucket you just created from the S3 bucket dropdown.
7. Click the Create button.