AWS Configure CloudTrail Setting

1. From AWS console dashboard, search and go to "CloudTrail"
2. Click on Trails in the left navigation pane, and click Create trail.



3. In General details page, enter a Trail name based on your preference, keep the default selection to Create a new S3 bucket.



4. Uncheck the options to enable Log file SSE-LMS encryption and Log file validation.
5. Scroll down and click Next to continue to Choose log events page.
6. In Events > Event type, select Mangement events and Data events types.



7. In Manage events > API activity: keep Read and Write options selected, then click Next.
8. Review the trail settings, make sure it is configured as multi-region trail, scroll down and click Create Trail.

You have finished all the preliminary steps to add your AWS account. Now go back to FortiCASB and click Next.