skills.rest
richardnroman
richardnromanCOMMUNITY
Explore all skills by this author →
GitHub

setting-up-cloudtrail-multi-region

Configures multi-region AWS CloudTrail with S3 storage and CloudWatch Logs Insights analysis.

Updated Jul 21, 2026
Search Tags:#aws#log analysis#s3#cloudwatch#cloudtrail#security monitoring#compliance auditing
One-click install
npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill setting-up-cloudtrail-multi-region-richardnroman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: setting-up-cloudtrail-multi-region
Source: https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform/tree/main/.agents/skills/setting-up-cloudtrail-multi-region
Command: npx skills add https://github.com/richardnroman/Synthetic-Data-Exchange-Licensing-Platform --skill setting-up-cloudtrail-multi-region-richardnroman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Setting up centralized API activity logging across all AWS regions involves many error-prone manual steps: creating S3 buckets with correct policies, IAM roles, CloudWatch log groups, and trail configuration. This Skill provides a verified, sequential procedure that eliminates misconfiguration risks for security monitoring and compliance auditing. ## Core Features & Use Cases - Multi-Region Trail Setup: Creates a CloudTrail trail capturing API events across all AWS regions with log file validation and global service events. - Secure S3 Log Storage: Configures a dedicated bucket with versioning, KMS encryption, lifecycle policies, and least-privilege bucket policies. - CloudWatch Logs Insights Analysis: Integrates real-time log delivery with ready-to-use queries for failed API calls, root account activity, and resource deletions. - Use Case: A security team needs centralized audit logging for compliance. The Skill walks through every AWS CLI command, verifies each step, and produces a full configuration report with cost guidance. ## Quick Start Set up a multi-region CloudTrail trail named security-audit-trail with an S3 bucket and CloudWatch Logs integration in us-east-1.

Frequently Asked Questions about setting-up-cloudtrail-multi-region

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a multi-region CloudTrail trail in AWS?▼

Create an S3 bucket with a CloudTrail bucket policy, create a CloudWatch log group and IAM role, then run aws cloudtrail create-trail with --is-multi-region-trail and start logging. The procedure verifies each step with get-trail-status.

How to analyze CloudTrail logs with CloudWatch Logs Insights?▼

CloudWatch Logs Insights queries filter CloudTrail events by fields like errorCode, eventName, and userIdentity. Sample queries cover failed API calls, root account activity, resource deletions, and IAM policy changes.

Does enabling CloudTrail data events increase AWS costs?▼

Yes, S3 and Lambda data events are charged per 100,000 events and can generate high volume on busy buckets. CloudTrail Insights is also a premium feature, so check current AWS pricing before enabling either option.

Why is my CloudTrail trail not logging events?▼

Common causes include missing IAM role permissions, an S3 bucket policy that blocks CloudTrail access, or the trail not being started with start-logging. Verify the role ARN, bucket policy, and trail status.

How long do CloudTrail events take to appear in CloudWatch?▼

Events typically appear in CloudWatch Logs within 5-15 minutes of API activity. Events from opt-in regions can take several hours, so wait up to 24 hours before treating it as a configuration issue.

Related Skills

Explore More Software Engineering Skills→
waybarrioswaybarrios
507

hf-cloud-aws-context-discovery

Discover the active AWS profile, region, account, and caller identity before AWS work.

Community
Intermediate
itsmostafaitsmostafa
1.1k

cloudwatch

Automate AWS CloudWatch monitoring setup for logs, metrics, alarms, and dashboards.

Community
Intermediate
balsm-healthbalsm-health
2

detecting-s3-data-exfiltration-attempts

Detect AWS S3 data exfiltration attempts by analyzing CloudTrail logs.

Official
Advanced
BagelHoleBagelHole
46

aws-cloudtrail

Configure AWS CloudTrail organization trails with KMS encryption and CloudTrail Lake.

Community
Intermediate