The bounty expires in 5 days. Answers to this question are eligible for a +50 reputation bounty. Somethingwhatever is looking for an answer from a reputable source. I am creating a Cloudtrail trail and an S3 bucket to store all my logs. My trail is an org level trail and a multi region trail. I […]

I am creating a cloudtrail trail and an s3 bucket to store all my logs. My trail is an org level trail and a multi region trail. i am setting up the s3 bucket policy from the following aws docs . My kms key policy allows cloudtrail to kms:GenerateDataKey*", "kms:DescribeKey", "kms:Decrypt.

I am creating a cloudtrail trail and an s3 bucket to store all my logs. My trail is an org level trail and a multi region trail. i am setting up the s3 bucket policy from the following aws docs . My kms key policy allows cloudtrail to kms:GenerateDataKey*", "kms:DescribeKey", "kms:Decrypt.