Procedure

1. In CloudTrail, click Create trail.

   

2. Fill out Trail name and Trail log bucket name to store the logs.
   1. (Optional) Fill out Prefix of the bucket for logs.
   2. (Optional) Configure the SSE-KMS for bucket data encryption.
   3. Click Next.

   

3. Configure what log events to collect:
   1. Check Data events, uncheck Management events.
   2. In Data events, select:
      • S3 for Data event type.
      • Log writeOnly events for Log selector template.
   3. Click Next.

   

4. Click Create trail. In the Dashboard, you can see that the Trail is in Logging status.