aws cloudtrail update-trail

Updates trail settings that control what events you are logging, and how to handle log files. AWS CLI reference

12 options Its page in the AWS CLI reference

Options

12 in the AWS CLI reference

--cloud-watch-logs-log-group-arnSpecifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs are delivered.

--cloud-watch-logs-role-arnSpecifies the role for the CloudWatch Logs endpoint to assume to write to a user's log group.

--enable-log-file-validationSpecifies whether log file validation is enabled.

--include-global-service-eventsSpecifies whether the trail is publishing events from global services such as IAM to the log files.

--is-multi-region-trailSpecifies whether the trail applies only to the current Region or to all Regions.

--is-organization-trailSpecifies whether the trail is applied to all accounts in an organization in Organizations, or only for the current Amazon Web Services account.

--kms-key-idSpecifies the KMS key ID to use to encrypt the logs and digest files delivered by CloudTrail.

--nameSpecifies the name of the trail or trail ARN.

--recursive-loggingSpecifies whether recursive logging is enabled for the trail.

--s3-bucket-nameSpecifies the name of the Amazon S3 bucket designated for publishing log files.

--s3-key-prefixSpecifies the Amazon S3 key prefix that comes after the name of the bucket you have designated for log file delivery.

--sns-topic-nameSpecifies the name or ARN of the Amazon SNS topic defined for notification of log file delivery.