Page summary display
You can configure the following settings when you create or update a trail with the CloudTrail console or the AWS Command Line Interface (AWS CLI). Both methods follow the same steps:
Turn on CloudTrail by creating a trail. By default, when you create a trail in a region in the CloudTrail console, the trail applies to all regions.
Create an Amazon S3 bucket or specify an existing bucket where you want the log files delivered. By default, log files from all regions in your account are delivered to the bucket that you specify.
Configure your trail to log read-only, write-only, or all management and data events. By default, trails log all management events.