aws cloudtrail create-trail

Creates a trail that specifies the settings for delivery of log data to an Amazon S3 bucket. AWS CLI reference

13 options Its page in the AWS CLI reference

Options

13 in the AWS CLI reference

--cloud-watch-logs-log-group-arnSpecifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered.

--cloud-watch-logs-role-arnSpecifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.

--enable-log-file-validationSpecifies whether log file integrity validation is enabled.

--include-global-service-eventsSpecifies whether the trail is publishing events from global services such as IAM to the log files.

--is-multi-region-trailSpecifies whether the trail is created in the current Region or in all Regions.

--is-organization-trailSpecifies whether the trail is created for all accounts in an organization in Organizations, or only for the current Amazon Web Services account.

--kms-key-idSpecifies the KMS key ID to use to encrypt the logs and digest files delivered by CloudTrail.

--nameSpecifies the name of the trail.

--recursive-loggingSpecifies whether recursive logging is enabled for the trail.

--s3-bucket-nameSpecifies the name of the Amazon S3 bucket designated for publishing log files.

--s3-key-prefixSpecifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery.

--sns-topic-nameSpecifies the name or ARN of the Amazon SNS topic defined for notification of log file delivery.

--tags-listA list of tags.