This template creates a CloudTrail event data store that logs events in all regions. It enables multi-region support, ingestion of events, and sets a retention period of 30 days. It also supports organization-wide event logging if the AWS partition is not 'aws-cn'. The event data store is not protected from termination and uses a specified KMS key for encryption. It includes tags for identification and advanced event selectors to filter events based on event category.

myEventDataStore
AWS::CloudTrail::EventDataStore


AdvancedEventSelectors
FieldSelectors *

EndsWith

Equals

NotEndsWith

NotEquals

NotStartsWith

StartsWith

Tags

Key
AWS::KMS::Key


Tags

CloudFormation Template

Share Template