VIEW RULE IN DATADOG VIEW SIGNALS

Description

AWS CloudTrail records AWS API calls and delivers log files containing the identity, time, IP address, and details of API interactions. It captures calls made through the console, SDKs, and more. Enabling a multi-region trail detects unexpected activity across regions and ensures Global Service Logging for AWS global services, facilitating security analysis, change tracking, and compliance auditing.

Remediation

For instructions on enabling multi-region CloudTrail logging, refer to the AWS CloudTrail User Guide.