setting-up-cloudtrail-multi-region

An agent skill by aws, from aws/agent-toolkit-for-aws. Tags: audit, aws, compliance, logs, security.

What it does

Enables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration, and CloudWatch Logs Insights queries for security monitoring and compliance auditing. Use when setting up centralized API activity logging across all AWS regions.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add aws/agent-toolkit-for-aws --skill setting-up-cloudtrail-multi-region

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/aws/agent-toolkit-for-aws
cp -r agent-toolkit-for-aws/skills/specialized-skills/operations-skills/setting-up-cloudtrail-multi-region ~/.claude/skills/setting-up-cloudtrail-multi-region

Safety box score

Not rated yet. A safety box score grades what a skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. Anyone can request one from this page; it is saved for everyone. How the score works.

Source

Repository

aws/agent-toolkit-for-aws (all skills from this repository)

Path

skills/specialized-skills/operations-skills/setting-up-cloudtrail-multi-region/SKILL.md

Branch

main

Updated

2026-09-19

Related skills

• aws-security — Covers AWS security services and workflows — Security Hub V2 (OCSF) findings, connectors, aggregators, automation rules, and security posture summaries.
• aws-cleanrooms — Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions.
• creating-secrets-using-best-practices — Creates and manages secrets in AWS Secrets Manager following security best practices.
• securing-s3-buckets — Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations.
• github-sensitive-data-cleanup — Scan and remove sensitive data (secrets, API keys, private domains/IPs, PII) from GitHub repository history.
• amazon-opensearch-service — Guides migration, provisioning, search, log-analytics, trace-analytics.