AWS Configure CloudTrail Setting

1. From AWS console dashboard, search and go to "CloudTrail"
2. Click on Trails in the left navigation pane, and click Create trail.



3. In General details page, enter a Trail name based on your preference, keep the default selection to Create a new S3 bucket.



4. Uncheck the options to enable Log file SSE-LMS encryption and Log file validation.
5. Scroll down and click Next to continue.
6. In Choose log events, Events > Event type, select Mangement events and Data events types.



7. In Manage events > API activity: keep Read and Write options selected.
8. In Data events, click Switch to basic event selectors.



9. In Data event source, select S3, then click Next.



10. Review the trail settings, make sure it is configured as multi-region trail, scroll down and click Create Trail.

You have finished all the preliminary steps to add your AWS account. Now go back to FortiCASB and click Next.